oss-security - CVE request: tikiwiki

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Mon, 1 Dec 2008 13:29:45 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com,
  "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: tikiwiki < 2.2

http://info.tikiwiki.org/tiki-read_article.php?articleId=41

"
Updating to version 2.2 is highly recommended. In addition to several minor 
fixes and enhancements, the update provides two undisclosed security fixes.

Special thanks to Emanuele Gentili for reporting one of the security issues.
"

Further information is not easy to get, the changelog lists a vast number of 
[sec]-marked fixes, though it's not easy to see if they are "just" 
improvements to prevent potential issues or real security issues.

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

http://waldbesetzung.blogsport.de/ Waldbesetzung gegen Flughafenausbau 
Frankfurt, 28. - 30.11.
http://www.jukss.de/ Jugemdumweltkongress, 27.12.-4.1.

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.