X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/fbfcea89f8e06426c73ab8ea369ca4cdc566db6f..5fbfab9bae300c0ec1747750996ce3b7ade737e2:/doc/security.mdwn diff --git a/doc/security.mdwn b/doc/security.mdwn index 99f40d3f1..d72382672 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -492,6 +492,8 @@ and whose admins run `ikiwiki-mass-rebuild`. ## javascript insertion via meta tags Raúl Benencia discovered an additional XSS exposure in the meta plugin. +([[!cve CVE-2012-0220]]) This hole was discovered on 16 May 2012 and fixed the same day with -the release of ikiwiki 3.20120516. +the release of ikiwiki 3.20120516. A fix was backported to Debian squeeze, +as version 3.20100815.9. An upgrade is recommended for all sites.