Package: dokuwiki Severity: important Tags: security Hi Tanguy, CVE-2014-8763/CVE-2014-8764 have been assigned to this: http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication
There was also a CVE assignment for this issue, which is already fixed in jessie: https://github.com/splitbrain/dokuwiki/issues/765 I don't know dokuwiki, should we fix the media manager issue in wheezy? See http://seclists.org/oss-sec/2014/q4/361 for details on the CVE assignments. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org