aboutsummaryrefslogtreecommitdiff
path: root/doc/news
diff options
context:
space:
mode:
authorSimon McVittie <smcv@debian.org>2016-05-06 21:35:14 +0100
committerSimon McVittie <smcv@debian.org>2016-05-06 21:36:51 +0100
commit0abef571c74e054bd6dfbaee140f1b334cdaa6e2 (patch)
treeb1d4e2d39e8dad611223e5223ef244eeba0e6897 /doc/news
parent855a7b5c6cabdd095253da8a3ff89f769d657b27 (diff)
downloadikiwiki-0abef571c74e054bd6dfbaee140f1b334cdaa6e2.tar
ikiwiki-0abef571c74e054bd6dfbaee140f1b334cdaa6e2.tar.gz
Add CVE reference
Diffstat (limited to 'doc/news')
-rw-r--r--doc/news/version_3.20160506.mdwn2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/news/version_3.20160506.mdwn b/doc/news/version_3.20160506.mdwn
index 331a48b6b..6800a3022 100644
--- a/doc/news/version_3.20160506.mdwn
+++ b/doc/news/version_3.20160506.mdwn
@@ -22,7 +22,7 @@ ikiwiki 3.20160506 released with [[!toggle text="these changes"]]
[[!toggleable text="""
* [ [[Simon McVittie|smcv]] ]
* HTML-escape error messages, in one case avoiding potential cross-site
- scripting (OVE-20160505-0012)
+ scripting ([[!cve CVE-2016-4561]], OVE-20160505-0012)
* Mitigate ImageMagick vulnerabilities such as CVE-2016-3714:
- img: force common Web formats to be interpreted according to extension,
so that "allowed\_attachments: '*.jpg'" does what one might expect