X-Git-Url: https://git.deb.at/?a=blobdiff_plain;f=ChangeLog;h=f2650e46b71b46b947952e5d4bb1da7877eb9ed8;hb=27b53d5162a27296c26b0e29ccbdea7c39a0f746;hp=70ce5f4126cfadb6a287a70a8373b3b12899f76e;hpb=ab8f331c59c697bd897b0c1332d0dc91659ea833;p=pkg%2Fblosxom.git

diff --git a/ChangeLog b/ChangeLog
index 70ce5f4..f2650e4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+v2.1.2
+    * Fix XSS in $flavour (CVE-2008-2236). Thanks to Yoshinori Ohta of
+      Business Architects Inc. for making us aware of this issue.
+
 v2.1.1
     * The "never trust a dot zero release" bugfix release for 2.1.0.
     * Added CVS Id keyword to file header.