summaryrefslogtreecommitdiff
path: root/doc/recentchanges/change_5f750e16b8c32d2fd69209f433e7d19efa53a71f._change
diff options
context:
space:
mode:
Diffstat (limited to 'doc/recentchanges/change_5f750e16b8c32d2fd69209f433e7d19efa53a71f._change')
-rw-r--r--doc/recentchanges/change_5f750e16b8c32d2fd69209f433e7d19efa53a71f._change77
1 files changed, 77 insertions, 0 deletions
diff --git a/doc/recentchanges/change_5f750e16b8c32d2fd69209f433e7d19efa53a71f._change b/doc/recentchanges/change_5f750e16b8c32d2fd69209f433e7d19efa53a71f._change
new file mode 100644
index 000000000..cb1e325e8
--- /dev/null
+++ b/doc/recentchanges/change_5f750e16b8c32d2fd69209f433e7d19efa53a71f._change
@@ -0,0 +1,77 @@
+[[!meta author="""joey"""]]
+
+[[!meta authorurl="""http://ikiwiki.info/ikiwiki.cgi?page=users%2Fjoey&do=goto"""]]
+
+[[!meta title="""change to security on ikiwiki"""]]
+
+[[!meta permalink="http://ikiwiki.info/recentchanges/#change-5f750e16b8c32d2fd69209f433e7d19efa53a71f"]]
+
+<div id="change-5f750e16b8c32d2fd69209f433e7d19efa53a71f" class="metadata">
+<span class="desc"><br />Changed pages:</span>
+<span class="pagelinks">
+
+<a href="http://git.ikiwiki.info/?p=ikiwiki;a=blobdiff;f=doc/security.mdwn;h=4fa531eb14a4c842f401fee72d845c19e481c1da;hp=2c342b19986104ed27b46c6c736768d34ad82c15;hb=5f750e16b8c32d2fd69209f433e7d19efa53a71f;hpb=65ecc73755348f1ed13b77b2f4bdf9db4e465be4" title="diff" rel="nofollow">[[diff|wikiicons/diff.png]]</a><a href="http://ikiwiki.info/ikiwiki.cgi?page=security&amp;do=goto" rel="nofollow">security</a>
+
+
+</span>
+<span class="desc"><br />Changed by:</span>
+<span class="committer">
+
+<a href="http://ikiwiki.info/ikiwiki.cgi?page=users%2Fjoey&amp;do=goto" rel="nofollow">joey</a>
+
+</span>
+<span class="desc"><br />Commit type:</span>
+<span class="committype">git</span>
+<span class="desc"><br />Date:</span>
+<span class="changedate"><span class="relativedate" title="Fri, 12 Nov 2010 10:25:21 -0400">10:25:21 11/12/10</span></span>
+<span class="desc"><br /></span>
+</div>
+
+<span class="revert">
+<a href="http://ikiwiki.info/ikiwiki.cgi?rev=5f750e16b8c32d2fd69209f433e7d19efa53a71f&amp;do=revert" title="revert" rel="nofollow">[[revert|wikiicons/revert.png]]</a>
+</span>
+
+<div class="changelog">
+
+
+CVE id<br />
+
+
+</div>
+
+<div class="diff">
+<pre>
+diff --git a/debian/changelog b/debian/changelog
+index f8dc04e..582a8e3 100644
+--- a/debian/changelog
++++ b/debian/changelog
+@@ -10,11 +10,11 @@ ikiwiki (3.20101112) unstable; urgency=HIGH
+ (Thanks, Tuomas Jormola)
+ * Fix htmlscrubber_skip to be matched on the source page, not the page it is
+ inlined into. Should allow setting to &quot;* and !comment(*)&quot; to scrub
+- comments, but leave your blog posts unscrubbed, etc.
++ comments, but leave your blog posts unscrubbed, etc. CVE-2010-1673
+ * comments: Make postcomment() pagespec work when previewing a comment,
+- including during moderation.
++ including during moderation. CVE-2010-1673
+ * comments: Make comment() pagespec also match comments that are being
+- posted.
++ posted. CVE-2010-1673
+
+ -- Joey Hess &lt;joeyh@debian.org&gt; Fri, 12 Nov 2010 00:36:06 -0400
+
+diff --git a/doc/security.mdwn b/doc/security.mdwn
+index 2c342b1..4fa531e 100644
+--- a/doc/security.mdwn
++++ b/doc/security.mdwn
+@@ -452,4 +452,4 @@ Additionally, it was discovered that comments&#39; html was never scrubbed during
+ preview or moderation of comments with such a configuration.
+
+ These problems were discovered on 12 November 2010 and fixed the same
+-hour with the release of ikiwiki 3.20101112.
++hour with the release of ikiwiki 3.20101112. (&#91;&#91;!cve CVE-2010-1673&#93;&#93;)
+
+</pre>
+</div>
+
+<!-- 5f750e16b8c32d2fd69209f433e7d19efa53a71f -->