Oh, my! I think this is the fastest I've ever gotten a hotfix out. I've found a serious security issue in Pepperminty Wiki which must be fixed right away! Please update to this release as soon as possible.
Please also edit the value of the secret property in peppermint.json, as it may have been compromised.
Edit: On the subject of security, this is now the first release that has experimental SHA256 hashes that are signed with GPG. Future releases will always be signed in the same way. My GPG key id is C2F7843F9ADF9FEE264ACB9CC1C6C0BB001E1725 (let me know if you encounter any issues.
Note that this is a maintenance release that backports some urgent bugfixes to v0.21. Current development efforts are focused on v0.22. The work-in-progress changelog for v0.22 can be found here.
Have you updated to this release? Click this link to say hi!
Updating
You can update to this release simply by grabbing an updated copy of index.php and replacing the version in your current wiki (don't forget to take backups! I make every effort to squash as many bugs as possible, but you can never be too certain). You can get an updated copy of index.php in a number of ways:
- By downloading the
index.phpfile attached to this release - Using the online downloader (always has the latest stable version)
- Using the online downloader offline
- Building your own from source
For more information on the last 2 methods, please see the documentation for more information.
Since v0.21
- [security] Fix security issue in the debug action