X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/afeb8db569b7e9bf52d418417e7af4153c10cb9a..04498cdeb486a518ef9ed2464cb95f734b48c6bd:/doc/security.mdwn

diff --git a/doc/security.mdwn b/doc/security.mdwn
index e636a0e45..52d9d3dc0 100644
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -460,5 +460,6 @@ Dave B noticed that attempting to comment on an illegal page name could be
 used for an XSS attack.
 
 This hole was discovered on 22 Jan 2011 and fixed the same day with
-the release of ikiwiki 3.20110122. An upgrade is recommended for sites
-with the comments plugin enabled.
+the release of ikiwiki 3.20110122. A fix was backported to Debian squeeze,
+as version 3.20100815.5. An upgrade is recommended for sites
+with the comments plugin enabled. ([[!cve CVE-2011-0428]])