X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/9976abe63ca7359255cdce890e6013e9a2105a13..838c1b5aec17ad90a894f21c12bb58adb5225276:/debian/NEWS
diff --git a/debian/NEWS b/debian/NEWS
index f976bdc01..362b5b629 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,4 +1,62 @@
-ikiwiki (3.20100422) unstable; urgency=low
+ikiwiki (3.20141016.3) jessie-security; urgency=high
+
+ To mitigate CVE-2016-3714 and similar ImageMagick security vulnerabilities,
+ the [[!img]] directive is now restricted to these common web formats by
+ default:
+
+ * JPEG (.jpg, .jpeg)
+ * PNG (.png)
+ * GIF (.gif)
+ * SVG (.svg)
+
+ (In particular, by default resizing PDF files is no longer allowed.)
+
+ Additionally, resized SVG files are displayed in the browser as SVG
+ instead of being converted to PNG.
+
+ If all users who can attach images are fully trusted, this restriction
+ can be removed with the new img_allowed_formats setup option.
+ See
+ or for
+ more details.
+
+ -- Simon McVittie Fri, 06 May 2016 07:07:29 +0100
+
+ikiwiki (3.20110122) unstable; urgency=low
+
+ If you have custom CSS that uses "#feedlinks" or "#blogform", you will
+ need to change it to instead use ".feedlinks" and ".blogform"
+
+ -- Joey Hess Fri, 14 Jan 2011 14:34:54 -0400
+
+ikiwiki (3.20100515) unstable; urgency=low
+
+ There are two significant changes to the page.tmpl template in this version.
+ If you have a locally modified version of that template, you will need to
+ update it at least to contain the following in the HTML :
+
+
+
+
+
+
+
+ Also, the footer should be wrapped in ...
+
+ There is a new "comment()" pagespec, that can be used to match a
+ comment on a page. It is recommended it be used instead of the old
+ method of using a pagespec such as "internal(comment_*)" to match
+ things that looked like comments. The old pagespec will now also match
+ comments that are held for moderation; likely not what you want.
+
+ There have also been some changes to the style.css in this version,
+ particularly to support the new openid selector. If you have a modified
+ version, of style.css, updating it (or moving it to local.css) is
+ recommended.
+
+ -- Joey Hess Wed, 05 May 2010 21:47:08 -0400
+
+ikiwiki (3.20100427) unstable; urgency=low
This version of ikiwiki has a lot of changes that you need to know about.
@@ -10,7 +68,7 @@ ikiwiki (3.20100422) unstable; urgency=low
extension is not recommended, as that allows anyone to change
a wiki's templates.
- The --getctime switch is renamed to --gettimes, and it also gets the
+ The --getctime switch is renamed to --gettime, and it also gets the
file modification time. And it's a lot faster (when using git). But
the really important change is, you don't have to remember to use this
switch. Now ikiwiki will do it when it needs to.
@@ -30,9 +88,6 @@ ikiwiki (3.20100422) unstable; urgency=low
has been moved to the new sortnaturally plugin, which is not enabled
by default since it requires the Sort::Naturally perl module.
- * TMPL_INCLUDE is no longer supported in any template used by ikiwiki.
- It used to be allowed in certian templates, but not in others.
-
* The add_templates option has been removed from the underlay plugin.
If you used this option, you can instead use templates/ subdirectories
inside underlay directories added by the add_underlays option.
@@ -42,7 +97,7 @@ ikiwiki (3.20100422) unstable; urgency=low
this will be done automatically when the Debian package is upgraded. Or
use ikiwiki-mass-rebuild to force a rebuild.
- -- Joey Hess Wed, 21 Apr 2010 20:31:29 -0400
+ -- Joey Hess Tue, 27 Apr 2010 00:00:00 -0400
ikiwiki (3.20091017) unstable; urgency=low