• [SECURITY] [DSA 3485-1] didiwiki security update

    From Sebastien Delafond@1:229/2 to All on Sat Feb 20 17:20:03 2016
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3485-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 20, 2016 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : didiwiki
    CVE ID : CVE-2013-7448
    Debian Bug : 815111

    Alexander Izmailov discovered that didiwiki, a wiki implementation,
    failed to correctly validate user-supplied input, thus allowing a
    malicious user to access any part of the filesystem.

    For the oldstable distribution (wheezy), this problem has been fixed
    in version 0.5-11+deb7u1.

    For the stable distribution (jessie), this problem has been fixed in
    version 0.5-11+deb8u1.

    For the testing (stretch) and unstable (sid) distributions, this
    problem has been fixed in version 0.5-12.

    We recommend that you upgrade your didiwiki packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2

    iQEcBAEBCgAGBQJWyG3mAAoJEBC+iYPz1Z1k6xcIAIS7tOS165VPlCDyH6yHfspq 0/09z2W+5WOlh7Ij5zSE3PFpabpej38l3Xg9Aydrg+A70D1PIKXHdLnBqwyFzT8y CpnyKlsIkNCS44CnU6SJO9ZYJKbMwNuDGrtKNEx9QizR5Q9DjKk1vqbbmaDqHLkb mCJbodibs6JPl2FRw0syd4j0w+0VuWQ5qndirHXzA0pH9Ea20lOn26waWsYM9uc0 nzKr99ue7Q61k3sk5KXGBvXJhzTTGaBe+Pj/64NU6B6qplCrbdMra8pCG2PLD5Br tEDZGfx+zBDnved/HdklOqpRRsL70vmE+mHGTjf3M6odDmhyc1Yk+3yYD376np4=
    =0zZV
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)