Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Fedora: ikiwiki Update Notification FEDORA-2017-8873ebdb43 Critical Fix

fedora
Calendar Grey January 27, 2017
Scroller Fedora
Fedora 24 has released an update for ikiwiki that tackles security vulnerabilities and introduces improved functionality. Users are encouraged to upgrade.
Update to the latest stable version

Summary

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages

suitable for publishing on a website. Ikiwiki stores pages and history

in a revision control system such as Subversion or Git. There are many

other features, including support for blogging, as well as a large

array of plugins.

Update Information:

Update to the latest stable version. See https://ikiwiki.info/news/ for the list of changes. Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.

Topics%20covered

Topics Covered

security advisory software update Fedora critical fix authentication bypass ikiwiki

Change Log

References


[ 1 ] Bug #1409556 - CVE-2016-9646 ikiwiki: Commit metadata forgery https://bugzilla.redhat.com/show_bug.cgi?id=1409556 [ 2 ] Bug #1406693 - CVE-2016-10026 ikiwiki: Authorization bypass when reverting changes https://bugzilla.redhat.com/show_bug.cgi?id=1406693 [ 3 ] Bug #1412698 - CVE-2017-0356 ikiwiki: Authentication bypass via repeated parameters https://bugzilla.redhat.com/show_bug.cgi?id=1412698

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ikiwiki' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ikiwiki
Product: Fedora 24
Version: 3.20170111
Release: 1.fc24
URL: http://ikiwiki.info/
Summary: A wiki compiler

Topics%20covered

Topics Covered

security advisory software update Fedora critical fix authentication bypass ikiwiki

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.