X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/51b4083c2286946973b066923d3af6e289f771ab..974408176cc7f42c9b59bc24efc5cb34097d9033:/debian/changelog diff --git a/debian/changelog b/debian/changelog index c6d92d117..5dd17a958 100644 --- a/debian/changelog +++ b/debian/changelog @@ -4,7 +4,7 @@ ikiwiki (3.20141016.3) jessie-security; urgency=high * img: stop ImageMagick trying to be clever if filenames contain a colon, avoiding mis-processing * HTML-escape error messages, in one case avoiding potential cross-site - scripting (OVE-20160505-0012) + scripting (CVE-2016-4561, OVE-20160505-0012) * Mitigate ImageMagick vulnerabilities such as CVE-2016-3714: - img: force common Web formats to be interpreted according to extension, so that "allowed_attachments: '*.jpg'" does what one might expect