+++ /dev/null
-ikiwiki 3.20170111 released with [[!toggle text="these changes"]]
-[[!toggleable text="""
- * passwordauth: prevent authentication bypass via multiple name
- parameters (CVE-2017-0356, OVE-20170111-0001)
- * passwordauth: avoid userinfo forgery via repeated email parameter
- (also in the scope of CVE-2017-0356)
- * CGI, attachment, passwordauth: harden against repeated parameters
- (not believed to have been a vulnerability)
- * remove: make it clearer that repeated page parameter is OK here
- * t/passwordauth.t: new automated test for passwordauth"""]]
\ No newline at end of file
--- /dev/null
+ikiwiki 3.20180311 released with [[!toggle text="these changes"]]
+[[!toggleable text="""
+ * [ Amitai Schleier ]
+ * Avoid unexpected full paths from find(1)
+ * [ thm.id.fedoraproject.org ]
+ * rst test: Probe for docutils Python 3 module, not Python 2
+ * [ Simon McVittie ]
+ * mdwn: Automatically detect which Discount flags to use, fixing
+ regressions in 3.20180228 when using Discount < 2.2
+ * Add a test asserting that no plugin is an empty file, to confirm
+ that the build fixes in 3.20180228 were successful"""]]
\ No newline at end of file