Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

Fedora 25 ikiwiki Security Update: Critical Threat Resolved

fedora
Calendar Grey January 27, 2017
Scroller Fedora
Keep up to date with the ikiwiki security patch for Fedora 25, tackling urgent vulnerabilities with effective solutions.
Update to the latest stable version

Summary

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages

suitable for publishing on a website. Ikiwiki stores pages and history

in a revision control system such as Subversion or Git. There are many

other features, including support for blogging, as well as a large

array of plugins.

Update Information:

Update to the latest stable version. See https://ikiwiki.info/news/ for the list of changes. Security fix for CVE-2016-10026, CVE-2016-9646, CVE-2017-0356.

Topics%20covered

Topics Covered

security advisory fedora software update authentication threats authorization ikiwiki

Change Log

References


[ 1 ] Bug #1409556 - CVE-2016-9646 ikiwiki: Commit metadata forgery https://bugzilla.redhat.com/show_bug.cgi?id=1409556 [ 2 ] Bug #1406693 - CVE-2016-10026 ikiwiki: Authorization bypass when reverting changes https://bugzilla.redhat.com/show_bug.cgi?id=1406693 [ 3 ] Bug #1412698 - CVE-2017-0356 ikiwiki: Authentication bypass via repeated parameters https://bugzilla.redhat.com/show_bug.cgi?id=1412698

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ikiwiki' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ikiwiki
Product: Fedora 25
Version: 3.20170111
Release: 1.fc25
URL: http://ikiwiki.info/
Summary: A wiki compiler

Topics%20covered

Topics Covered

security advisory fedora software update authentication threats authorization ikiwiki

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.