X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/d8ec77a3cd00df02b08663d4be1fd117ea2fe57b..c1e9e121b738909a84eba8be327b5eaca74e7964:/doc/security.mdwn?ds=sidebyside diff --git a/doc/security.mdwn b/doc/security.mdwn index b2e076ec4..57cac719f 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -403,7 +403,7 @@ passwords in cleartext over the net to log in, either. This hole allowed ikiwiki to accept logins using empty passwords, to openid accounts that didn't use a password. It was introduced in version 1.34, and fixed in version 2.48. The [bug](http://bugs.debian.org/483770) was -discovered on 30 May 2008 and fixed the same day. +discovered on 30 May 2008 and fixed the same day. ([[cve CVE-2008-0169]]) I recommend upgrading to 2.48 immediatly if your wiki allows both password and openid logins.