diff --git a/doc/news/version_3.20150329.mdwn b/doc/news/version_3.20150329.mdwn index 787efd965..0ac19a88d 100644 --- a/doc/news/version_3.20150329.mdwn +++ b/doc/news/version_3.20150329.mdwn @@ -1,9 +1,11 @@ ikiwiki 3.20150329 released with [[!toggle text="these changes"]] [[!toggleable text=""" [ [[Joey Hess|joey]] ] + * Fix NULL ptr deref on ENOMEM in wrapper. (Thanks, igli) [ [[Simon McVittie|smcv]] ] + * Really don't double-decode CGI submissions, even on Perl versions that bundle an old enough Encode.pm for that not to be a problem: the system might have a newer Encode.pm installed separately, like Fedora 20. @@ -15,9 +17,11 @@ ikiwiki 3.20150329 released with [[!toggle text="these changes"]] * Consistently document command-line options as e.g. --refresh, not -refresh [ [[Amitai Schlair|schmonz]] ] + * In VCS-committed anonymous comments, link to url. [ [[Joey Hess|joey]] ] + * Fix XSS in openid selector. Thanks, Raghav Bisht. (Closes: [[!debbug 781483]]) """]]