X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/dc3b08be94d86a7aaf8e7823b30e225037e196d5..1786b60fe75e889c58cecaf78305d342beabfa00:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index ede976151..c01b697e3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,26 @@
+ikiwiki (2.53.5) stable-security; urgency=high
+
+  * htmlscrubber: Security fix: In data:image/* uris, only allow a few
+    whitelisted image types. No svg.
+
+ -- Joey Hess <joeyh@debian.org>  Fri, 12 Mar 2010 15:19:29 -0500
+
+ikiwiki (2.53.4) stable-security; urgency=high
+
+  * teximg: Replace the insufficient blacklist with the built-in security
+    mechanisms of TeX. (CVE-2009-2944)
+  * img: Don't generate new verison of image if it is scaled to be
+    larger in either dimension. 
+
+ -- Joey Hess <joeyh@debian.org>  Fri, 28 Aug 2009 23:42:51 -0400
+
+ikiwiki (2.53.3) testing-proposed-updates; urgency=low
+
+  * Avoid crash on malformed utf-8 discovered by intrigeri.
+  * orphans: Fix unquoted page name in regexp.
+
+ -- Joey Hess <joeyh@debian.org>  Thu, 09 Oct 2008 19:12:18 -0400
+
 ikiwiki (2.53.2) testing-proposed-updates; urgency=low
 
   * Fix bad patch backport that broke generation of rss/atom feeds. Closes: #498224
@@ -18,9 +41,10 @@ ikiwiki (2.53.1) testing-proposed-updates; urgency=low
     work. Markdown removes one level of escaping.
   * Add a postscan hook.
   * search: Use postscan hook, avoid updating index when previewing.
-  * search: Fixes for title stemming, and use better term for tags. (Gabriel McManus)
-    (Rebuilding the wiki on upgrade to this version is recommended if you use the
-    search plugin.)
+  * search: Fixes for title stemming, and use better term for tags.
+    (Gabriel McManus)
+    (Rebuilding the wiki on upgrade to this version is recommended if you
+    use the search plugin.)
   * meta: fix title() PageSpec (DOS). Closes: #497444
   * Really fix bug with links to pages with names containing colons. 
     Previous fix mised a few cases.