summaryrefslogtreecommitdiff
path: root/debian/changelog
diff options
context:
space:
mode:
authorjoey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>2007-03-21 06:46:06 +0000
committerjoey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>2007-03-21 06:46:06 +0000
commit72ed9e455c0cb697bd01a2a44b4b63820774cc35 (patch)
treee61e2df280af03ba0f3c7f7041d850e893bb2e2e /debian/changelog
parentaf63a2ebff201be7173a296aeabfc2713461c543 (diff)
the real bug turned out to be in the meta plugin
Diffstat (limited to 'debian/changelog')
-rw-r--r--debian/changelog4
1 files changed, 2 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog
index 86815828a..976143aee 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -12,8 +12,8 @@ ikiwiki (1.46) unstable; urgency=low
same time, and let the second person resolve the conflict.
* Applied a patch from MichaƂ to make the mercurial backend pass --quiet to
hg.
- * Fix a security hole that allowed a web user to insert
- arbitrary html in the title of a page due to missing escaping.
+ * Fix a security hole that allowed a web user to insert arbitrary html in
+ the title of a page due to missing escaping of titles in the meta plugin.
-- Joey Hess <joeyh@debian.org> Wed, 21 Mar 2007 01:51:30 -0400