X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/93429ca11da82eeac9722c00b6b9e81a5d570abb..056349a7f0cf3dd470cdd9633b7fe955fb03268f:/debian/changelog?ds=inline

diff --git a/debian/changelog b/debian/changelog
index 52ab91b8b..9c114bc3a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,63 @@
-ikiwiki (3.20170109) UNRELEASED; urgency=medium
+ikiwiki (3.20170623) UNRELEASED; urgency=medium
+
+  [ Joey Hess ]
+  * htmlscrubber: Add support for the video tag's loop and muted
+    attributes. Those were not in the original html5 spec, but have been
+    added in the whatwg html living standard and have wide browser support.
+
+  [ Simon McVittie ]
+  * core: Don't decode the result of strftime if it is already tagged as
+    UTF-8, as it might be since Perl >= 5.21.1. (Closes: #869240)
+
+ -- Joey Hess <id@joeyh.name>  Tue, 11 Jul 2017 15:48:39 -0400
+
+ikiwiki (3.20170622) unstable; urgency=medium
+
+  * t/git-cgi.t: Wait 1 second before doing a revert that should work.
+    This hopefully fixes a race condition in which the test failed
+    around 6% of the time. (Closes: 862494)
+  * Guard against set-but-empty REMOTE_USER CGI variable on
+    misconfigured nginx servers, and in general treat sessions with
+    a set-but-empty name as if they were not signed in.
+  * When the CGI fails, print the error to stderr, not "Died"
+  * mdwn: Don't mangle <style> into <elyts> under some circumstances
+  * mdwn: Enable footnotes by default when using the default Discount
+    implementation. A new mdwn_footnotes option can be used to disable
+    footnotes in MultiMarkdown and Discount.
+  * mdwn: Don't enable alphabetically labelled ordered lists by
+    default when using the default Discount implementation. A new
+    mdwn_alpha_list option can be used to restore the old
+    interpretation.
+  * osm: Convert savestate hook into a changes hook. savestate is not
+    the right place to write wiki content, and in particular this
+    breaks websetup if osm's dependencies are not installed, even
+    if the osm plugin is not actually enabled. (Closes: #719913)
+  * toc: if the heading is of the form <h1 id="...">, use that for
+    the link in the table of contents (but continue to generate
+    <a name="index42"></a> in case someone was relying on it).
+    Thanks, Antoine Beaupré
+  * color: Do not leak markup into contexts that take only the plain
+    text, such as toc
+  * meta: Document [[!meta name="foo" content="bar"]]
+  * debian: Use preferred https URL for Format of debian/copyright
+  * debian: Declare compliance with Debian Policy 4.0.0
+
+ -- Simon McVittie <smcv@debian.org>  Thu, 22 Jun 2017 09:24:57 +0100
+
+ikiwiki (3.20170111) unstable; urgency=high
+
+  * passwordauth: prevent authentication bypass via multiple name
+    parameters (CVE-2017-0356, OVE-20170111-0001)
+  * passwordauth: avoid userinfo forgery via repeated email parameter
+    (also in the scope of CVE-2017-0356)
+  * CGI, attachment, passwordauth: harden against repeated parameters
+    (not believed to have been a vulnerability)
+  * remove: make it clearer that repeated page parameter is OK here
+  * t/passwordauth.t: new automated test for passwordauth
+
+ -- Simon McVittie <smcv@debian.org>  Wed, 11 Jan 2017 18:16:53 +0000
+
+ikiwiki (3.20170110) unstable; urgency=medium
 
   [ Amitai Schleier ]
   * wrappers: Correctly escape quotes in git_wrapper_background_command
@@ -26,8 +85,22 @@ ikiwiki (3.20170109) UNRELEASED; urgency=medium
   * news: use Debian security tracker instead of MITRE for security
     references. Thanks, anarcat
   * Set package format to 3.0 (native)
-
- -- Simon McVittie <smcv@debian.org>  Mon, 09 Jan 2017 14:33:19 +0000
+  * d/copyright: re-order to put more specific stanzas later, to get the
+    intended interpretation
+  * d/source/lintian-overrides: override obsolete-url-in-packaging for
+    OpenID Selector, which does not seem to have any more current URL
+    (and in any case our version is a fork)
+  * docwiki.setup: exclude TourBusStop from offline documentation.
+    It does not make much sense there.
+  * d/ikiwiki.lintian-overrides: override script-not-executable warnings
+  * d/ikiwiki.lintian-overrides: silence false positive spelling warning
+    for Moin Moin
+  * d/ikiwiki.doc-base: register the documentation with doc-base
+  * d/control: set libmagickcore-6.q16-3-extra as preferred
+    build-dependency, with virtual package libmagickcore-extra as an
+    alternative, to help autopkgtest to do the right thing
+
+ -- Simon McVittie <smcv@debian.org>  Tue, 10 Jan 2017 13:22:01 +0000
 
 ikiwiki (3.20161229.1) unstable; urgency=medium