X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/e548b0c24575a91ba4678e9cf1b78e02ff15d887..21f3eb5bc02b0398ddffc79c234f967e5656b51d:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 1f73523a4..6379acc0e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,10 @@ ikiwiki (3.20110329) UNRELEASED; urgency=low
 
   * meta: Allow adding javascript to pages. Only when htmlscrubber is
     disabled, naturally. (Thanks, Giuseppe Bilotta)
+  * comments: Add avatar picture of comment author, using Libravatar::URL
+    when available. The avatar is looked up based on the user's openid,
+    or email address. (Thanks, Francois Marier)
+  * Recommend libgravatar-url-perl, which contains Libravatar::URL.
 
  -- Joey Hess <joeyh@debian.org>  Mon, 28 Mar 2011 13:08:23 -0400
 
@@ -14,7 +18,7 @@ ikiwiki (3.20110328) unstable; urgency=low
   * comment: Better fix to avoid showing comments of subpages, while
     not breaking manual inlining of comments.
   * meta: Security fix; don't allow alternative stylesheets to be added
-    on pages where the htmlscrubber is enabled.
+    on pages where the htmlscrubber is enabled. CVE-2011-1401
 
  -- Joey Hess <joeyh@debian.org>  Mon, 28 Mar 2011 12:23:26 -0400