diff options
Diffstat (limited to 'doc/news/version_2.14.mdwn')
| -rw-r--r-- | doc/news/version_2.14.mdwn | 20 |
1 files changed, 0 insertions, 20 deletions
diff --git a/doc/news/version_2.14.mdwn b/doc/news/version_2.14.mdwn deleted file mode 100644 index aa3218581..000000000 --- a/doc/news/version_2.14.mdwn +++ /dev/null @@ -1,20 +0,0 @@ -This is a security fix release, upgrade is recommended. - -News for ikiwiki 2.14: - - This version of ikiwiki is more picky about symlinks in the path leading - to the srcdir, and will refuse to use a srcdir specified by such a path. - This was necessary to avoid some potential exploits, but could potentially - break (semi-)working wikis. If your wiki has a srcdir path containing a - symlink, you should change it to use a path that does not. - -ikiwiki 2.14 released with [[toggle text="these changes"]] -[[toggleable text=""" - * Let CC be used to control what compiler is used to build wrappers. - * Use 'cc' instead of gcc as the default compiler. - * Security fix: Ensure that there are no symlinks anywhere in the path - to the top of the srcdir. In certian unusual configurations, an attacker - who could commit to one of the parent directories of the srcdir could - use a symlink attack to cause ikiwiki to publish files elsewhere in the - filesystem. More details [[here|security#index29h2]] -"""]] |