aboutsummaryrefslogtreecommitdiff
path: root/doc/news
diff options
context:
space:
mode:
Diffstat (limited to 'doc/news')
-rw-r--r--doc/news/version_3.20160506.mdwn2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/news/version_3.20160506.mdwn b/doc/news/version_3.20160506.mdwn
index 331a48b6b..6800a3022 100644
--- a/doc/news/version_3.20160506.mdwn
+++ b/doc/news/version_3.20160506.mdwn
@@ -22,7 +22,7 @@ ikiwiki 3.20160506 released with [[!toggle text="these changes"]]
[[!toggleable text="""
* [ [[Simon McVittie|smcv]] ]
* HTML-escape error messages, in one case avoiding potential cross-site
- scripting (OVE-20160505-0012)
+ scripting ([[!cve CVE-2016-4561]], OVE-20160505-0012)
* Mitigate ImageMagick vulnerabilities such as CVE-2016-3714:
- img: force common Web formats to be interpreted according to extension,
so that "allowed\_attachments: '*.jpg'" does what one might expect