summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/changelog6
-rw-r--r--doc/security.mdwn2
2 files changed, 4 insertions, 4 deletions
diff --git a/debian/changelog b/debian/changelog
index f8dc04eca..582a8e36a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,11 +10,11 @@ ikiwiki (3.20101112) unstable; urgency=HIGH
(Thanks, Tuomas Jormola)
* Fix htmlscrubber_skip to be matched on the source page, not the page it is
inlined into. Should allow setting to "* and !comment(*)" to scrub
- comments, but leave your blog posts unscrubbed, etc.
+ comments, but leave your blog posts unscrubbed, etc. CVE-2010-1673
* comments: Make postcomment() pagespec work when previewing a comment,
- including during moderation.
+ including during moderation. CVE-2010-1673
* comments: Make comment() pagespec also match comments that are being
- posted.
+ posted. CVE-2010-1673
-- Joey Hess <joeyh@debian.org> Fri, 12 Nov 2010 00:36:06 -0400
diff --git a/doc/security.mdwn b/doc/security.mdwn
index 2c342b199..4fa531eb1 100644
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -452,4 +452,4 @@ Additionally, it was discovered that comments' html was never scrubbed during
preview or moderation of comments with such a configuration.
These problems were discovered on 12 November 2010 and fixed the same
-hour with the release of ikiwiki 3.20101112.
+hour with the release of ikiwiki 3.20101112. ([[!cve CVE-2010-1673]])