diff options
| -rw-r--r-- | doc/news/version_2.14.mdwn | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/doc/news/version_2.14.mdwn b/doc/news/version_2.14.mdwn new file mode 100644 index 000000000..aa7ab894f --- /dev/null +++ b/doc/news/version_2.14.mdwn @@ -0,0 +1,17 @@ +News for ikiwiki 2.14: + + This version of ikiwiki is more picky about symlinks in the path leading + to the srcdir, and will refuse to use a srcdir specified by such a path. + This was necessary to avoid some potential exploits, but could potentially + break (semi-)working wikis. If your wiki has a srcdir path containing a + symlink, you should change it to use a path that does not. + +ikiwiki 2.14 released with [[toggle text="these changes"]] +[[toggleable text=""" + * Let CC be used to control what compiler is used to build wrappers. + * Use 'cc' instead of gcc as the default compiler. + * Security fix: Ensure that there are no symlinks anywhere in the path + to the top of the srcdir. In certian unusual configurations, an attacker + who could commit to one of the parent directories of the srcdir could + use a symlink attack to cause ikiwiki to publish files elsewhere in the + filesystem. More details at <http://ikiwiki.info/security/#index29h2>"""]]
\ No newline at end of file |