Accepted ikiwiki 3.20160506~bpo8+1 (all source) into jessie-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 06 May 2016 08:58:18 +0100
Source: ikiwiki
Binary: ikiwiki
Architecture: all source
Version: 3.20160506~bpo8+1
Distribution: jessie-backports
Urgency: medium
Maintainer: Simon McVittie <smcv@debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
ikiwiki - wiki compiler
Changes:
ikiwiki (3.20160506~bpo8+1) jessie-backports; urgency=medium
.
* Rebuild for jessie-backports
* debian/tests/control: set INSTALLED_TESTS=1 here, pkg-perl-autopkgtest
in jessie didn't support debian/tests/pkg-perl/smoke-env
.
ikiwiki (3.20160506) unstable; urgency=medium
.
[ Simon McVittie ]
* img: stop ImageMagick trying to be clever if filenames contain a colon,
avoiding mis-processing
* HTML-escape error messages, in one case avoiding potential cross-site
scripting (OVE-20160505-0012)
* Mitigate ImageMagick vulnerabilities such as CVE-2016-3714:
- img: force common Web formats to be interpreted according to extension,
so that "allowed_attachments: '*.jpg'" does what one might expect
- img: restrict to JPEG, PNG and GIF images by default, again mitigating
CVE-2016-3714 and similar vulnerabilities
- img: check that the magic number matches what we would expect from
the extension before giving common formats to ImageMagick
* d/control: use https for Homepage
* d/control: add Vcs-Browser
.
[ Joey Hess ]
* img: Add back support for SVG images, bypassing ImageMagick and
simply passing the SVG through to the browser, which is supported by all
commonly used browsers these days.
SVG scaling by img directives has subtly changed; where before
size=wxh would preserve aspect ratio, this cannot be done when passing
them through and so specifying both a width and height can change
the SVG's aspect ratio.
* loginselector: When only openid and emailauth are enabled, but
passwordauth is not, avoid showing a "Other" box which opens an
empty form.
.
[ Amitai Schlair ]
* mdwn: Process .md like .mdwn, but disallow web creation.
.
[ Florian Wagner ]
* git: Correctly handle filenames starting with a dash in add/rm/mv.
Checksums-Sha1:
fe57993c9ee3228c0887d144cc261dccaaa2b35c 2168 ikiwiki_3.20160506~bpo8+1.dsc
c443ac5aca493ed48c384f09ffadf9004bd90763 3438027 ikiwiki_3.20160506~bpo8+1.tar.gz
e07ba79cbb7c7b14ab2e49c729ccaacc044b4db1 1411472 ikiwiki_3.20160506~bpo8+1_all.deb
Checksums-Sha256:
7f46787f0ab37b12c468c1af2f0c9170daf5b63195e8b68dea43a0a5eced37d5 2168 ikiwiki_3.20160506~bpo8+1.dsc
7b0bb9048a1004a27af53e3c1f40a7079b266704dc48a210d4941b877fb1deb1 3438027 ikiwiki_3.20160506~bpo8+1.tar.gz
68ae8cf04e85665279f66cd563d4ac280486859ae4c2a6d88ef8fe5ebc4a862f 1411472 ikiwiki_3.20160506~bpo8+1_all.deb
Files:
1addec00f32eb9a284de9d8ea8476b43 2168 web optional ikiwiki_3.20160506~bpo8+1.dsc
ac8b5e84e242eb32022ed804b1898d42 3438027 web optional ikiwiki_3.20160506~bpo8+1.tar.gz
44c595c454f69f2e234c35955f1709cf 1411472 web optional ikiwiki_3.20160506~bpo8+1_all.deb
-----BEGIN PGP SIGNATURE-----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=GLAh
-----END PGP SIGNATURE-----
Reply to: