urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cve

master
Joey Hess 2012-05-16 21:18:40 -04:00
parent 6f897f53da
commit 22acf1872a
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/changelog vendored
View File

@ -1,7 +1,7 @@
ikiwiki (3.20120516) unstable; urgency=high
* meta: Security fix; add missing sanitization of author and authorurl.
Thanks, Raúl Benencia
CVE-2012-0220 Thanks, Raúl Benencia
-- Joey Hess <joeyh@debian.org> Wed, 16 May 2012 19:51:27 -0400

4
doc/security.mdwn
View File

@ -492,6 +492,8 @@ and whose admins run `ikiwiki-mass-rebuild`.
## javascript insertion via meta tags
Raúl Benencia discovered an additional XSS exposure in the meta plugin.
([[!cvs CVE-2012-0220]])
This hole was discovered on 16 May 2012 and fixed the same day with
the release of ikiwiki 3.20120516.
the release of ikiwiki 3.20120516. A fix was backported to Debian squeeze,
as version 3.20100815.9. An upgrade is recommended for all sites.