releasing version 2.48

master
Joey Hess 2008-05-30 18:21:27 -04:00
parent 1715c0399e
commit 8d72885b47
2 changed files with 3 additions and 3 deletions

2
debian/NEWS vendored
View File

@ -1,4 +1,4 @@
ikiwiki (2.48) unstable; urgency=low ikiwiki (2.48) unstable; urgency=high
If you allowed password based logins to your wiki, those passwords were If you allowed password based logins to your wiki, those passwords were
stored in cleartext in the userdb. To guard against exposing users' stored in cleartext in the userdb. To guard against exposing users'

4
debian/changelog vendored
View File

@ -1,8 +1,8 @@
ikikiwiki (2.48) unstable; urgency=high ikiwiki (2.48) unstable; urgency=high
* Fix security hole that occurred if openid and passwordauth were both * Fix security hole that occurred if openid and passwordauth were both
enabled. passwordauth would allow logging in as a known openid, with an enabled. passwordauth would allow logging in as a known openid, with an
empty password. Closes: # empty password. Closes: #483770
* Add rel=nofollow to edit links. This may prevent some spiders from * Add rel=nofollow to edit links. This may prevent some spiders from
pounding on the cgi following edit links. pounding on the cgi following edit links.
* passwordauth: If Authen::Passphrase is installed, use it to store * passwordauth: If Authen::Passphrase is installed, use it to store