X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/4db40b4e59c1e735e4176f3e82b825e895306c4c..e15e3202eb04048feb302b39d946f1ae1a15c306:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 3de7ea785..299d7d571 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,18 @@
-ikiwiki (2.13) UNRELEASED; urgency=low
+ikiwiki (2.14) unstable; urgency=high
+
+  * Let CC be used to control what compiler is used to build wrappers.
+  * Use 'cc' instead of gcc as the default compiler.
+  * Security fix: Ensure that there are no symlinks anywhere in the path
+    to the top of the srcdir. In certian unusual configurations, an attacker
+    who could commit to one of the parent directories of the srcdir could
+    use a symlink attack to cause ikiwiki to publish files elsewhere in the
+    filesystem. More details at <http://ikiwiki.info/security/#index29h2>
+
+ -- Joey Hess <joeyh@debian.org>  Mon, 26 Nov 2007 15:26:06 -0500
+
+ikiwiki (2.13) unstable; urgency=low
+
+  The ikiwiki zombie army release.
 
   * Add liblwpx-paranoidagent-perl to recommends of Debian package,
     this is needed to do OpenID really securely.
@@ -10,8 +24,22 @@ ikiwiki (2.13) UNRELEASED; urgency=low
     then there's a shared repository with access controlled by a group,
     to let ikiwiki run setgid to that group.
   * ikiwiki-mass-rebuild: Run build with the user in all their groups.
-
- -- Joey Hess <joeyh@debian.org>  Wed, 14 Nov 2007 08:37:03 -0500
+  * Correct markdown in example index page in setup. Closes: #451469
+  * Better error message when a setup file has a syntax error.
+    Closes: #451666
+  * Fix mercurial historyurl in example setup file.
+  * More compact output for the brokenlinks plugin.
+  * Allow trailing slashes after page names in wikilinks.
+  * Don't consider links to anchors on the same page to be self links.
+    Patch by Daniel Burrows. Closes: #451729
+  * When usedirs is disabled, link direct to index.html files, not to
+    directories, to improve browsing of file:// urls.
+    Patch by Daniel Burrows. Closes: #451728
+  * Allow html5 video and audio tags and their attributes in the htmlscrubber.
+  * toc: Handle html elements embedded inside a header, rather than
+    stopping collecting the header text at the first element.
+
+ -- Joey Hess <joeyh@debian.org>  Sat, 24 Nov 2007 16:06:22 -0500
 
 ikiwiki (2.12) unstable; urgency=low