diff docs/CHANGES @ 5507:86273969a1d8

updated docs/CHANGES
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Sat, 06 Feb 2010 00:37:03 +0100
parents b2cf6e04d5aa
children 40594fbcf376 1cc5dee5ecae
line wrap: on
line diff
--- a/docs/CHANGES	Sat Feb 06 00:24:34 2010 +0100
+++ b/docs/CHANGES	Sat Feb 06 00:37:03 2010 +0100
@@ -17,6 +17,27 @@
     editor_default = 'text'  # internal default, just for completeness
 
 
+Version 1.8.7:
+  Fixes:
+  * Fixed major security issues in misc. actions.
+    HINT: if you have removed superuser configuration to workaround the issue
+    (following our security advisory), you may re-add it after installing this
+    moin release.
+  * Improved package security: cfg.packagepages_actions_excluded excludes
+    unsafe or otherwise questionable package actions by default now.
+  * wiki parser: fixed transclusion of (e.g. video) attachments from other
+    pages.
+  * Fixed edit locking for non-logged in editors and cfg.log_remote_addr=False.
+  * xmlrpc:
+    * Process attachname in get/putAttachment similarly.
+    * revertPage: convert pagename to internal representation.
+  * Fixed config.umask usage for page packages.
+  * Fixed usage of i18n.wikiLanguages() on class level (moved to method), failed
+    when tools import the module (e.g. pydoc -k foo).
+  * SubProcess: fixed win32-specific parts, fixed imports (fixes calling of
+    external xapian index filters)
+
+
 Version 1.8.6:
   Bug fixes:
   * Xapian indexing / indexing filters: