Debian Long Term Support / LTS Security Information / 2017 / Security Information -- DLA-812-1 ikiwiki

Debian Security Advisory

DLA-812-1 ikiwiki -- LTS security update

Date Reported:

31 Jan 2017

Affected Packages:

ikiwiki

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2016-9646, CVE-2016-10026, CVE-2017-0356.

More information:

Several vulnerabilities have been found in ikiwiki, a wiki compiler:

• CVE-2016-9646

  Commit metadata forgery

• CVE-2016-10026

  Authorization bypass when reverting changes

• CVE-2017-0356

  Authentication bypass via repeated parameters

For Debian 7 Wheezy, these problems have been fixed in version 3.20120629.2+deb7u2.

We recommend that you upgrade your ikiwiki packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS