Reference CVE-2016-4561 in 3.20160506 changelog

diff --git a/debian/changelog b/debian/changelog
index 3a73c01c8c8dbcb5da2a7cafa4b861795ae79e33..c4d4eab46693a6487be3803e43cf898c945976c3 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,7 +2,7 @@ ikiwiki (3.20160506) unstable; urgency=medium
 
   [ Simon McVittie ]
   * HTML-escape error messages, in one case avoiding potential cross-site
-    scripting (OVE-20160505-0012)
+    scripting (CVE-2016-4561, OVE-20160505-0012)
   * Mitigate ImageMagick vulnerabilities such as CVE-2016-3714:
     - img: force common Web formats to be interpreted according to extension,
       so that "allowed_attachments: '*.jpg'" does what one might expect