oss-security - CVE request: various security flaws in dokuwiki

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <87eguc2m1l.fsf@redhat.com>
Date: Mon, 13 Oct 2014 14:26:14 +0200
From: Martin Prpic <mprpic@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: various security flaws in dokuwiki

Hi, could CVEs please be assigned to the following issues?

The following security-related flaws have been fixed in the 2014-05-05 and 2014-09-29 releases of dokuwiki:

* Security Hotfix 2014-05-05a for Issue 765:

https://github.com/splitbrain/dokuwiki/issues/765

* Security Hotfix 2014-05-05b for AD/LDAP auth plugin related problem
  Security fix for AD/LDAP auth plugin related problem:

http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication

Red Hat Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1150131

-- 
Martin Prpič / Red Hat Product Security

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.