X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/fa2918f13f03a3d8dfd6f987a518695d7763fb01..40f56033aeb788a31838632e240665916c2ed905:/debian/NEWS?ds=sidebyside diff --git a/debian/NEWS b/debian/NEWS index 6074d6260..6493175dc 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,13 +1,58 @@ -ikiwiki (3.20100505) UNRELEASED; urgency=low +ikiwiki (3.20141016.3) UNRELEASED; urgency=medium - There is a significant change to the page.tmpl template in this version. - If you have locally modified versions of that template, you will need - to update it to contain the following in the HTML : + To mitigate CVE-2016-3714 and similar ImageMagick security vulnerabilities, + the [[!img]] directive is now restricted to these common web formats by + default: - + * JPEG (.jpg, .jpeg) + * PNG (.png) + * GIF (.gif) + * SVG (.svg) + + (In particular, by default resizing PDF files is no longer allowed.) + + Additionally, resized SVG files are displayed in the browser as SVG + instead of being converted to PNG. + + If all users who can attach images are fully trusted, this restriction + can be removed with the new img_allowed_formats setup option. + See + or for + more details. + + -- Simon McVittie Fri, 06 May 2016 07:07:29 +0100 + +ikiwiki (3.20110122) unstable; urgency=low + + If you have custom CSS that uses "#feedlinks" or "#blogform", you will + need to change it to instead use ".feedlinks" and ".blogform" + + -- Joey Hess Fri, 14 Jan 2011 14:34:54 -0400 + +ikiwiki (3.20100515) unstable; urgency=low + + There are two significant changes to the page.tmpl template in this version. + If you have a locally modified version of that template, you will need to + update it at least to contain the following in the HTML : + + + + + Also, the footer should be wrapped in ... + + There is a new "comment()" pagespec, that can be used to match a + comment on a page. It is recommended it be used instead of the old + method of using a pagespec such as "internal(comment_*)" to match + things that looked like comments. The old pagespec will now also match + comments that are held for moderation; likely not what you want. + + There have also been some changes to the style.css in this version, + particularly to support the new openid selector. If you have a modified + version, of style.css, updating it (or moving it to local.css) is + recommended. -- Joey Hess Wed, 05 May 2010 21:47:08 -0400 @@ -23,7 +68,7 @@ ikiwiki (3.20100427) unstable; urgency=low extension is not recommended, as that allows anyone to change a wiki's templates. - The --getctime switch is renamed to --gettimes, and it also gets the + The --getctime switch is renamed to --gettime, and it also gets the file modification time. And it's a lot faster (when using git). But the really important change is, you don't have to remember to use this switch. Now ikiwiki will do it when it needs to.