package dokuwiki fixed 766545 dokuwiki/0.0.20140929.a-1 thanks
Moritz Muehlenhoff, 2014-10-23 23:11+0200:
Hi Tanguy, CVE-2014-8763/CVE-2014-8764 have been assigned to this: http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication There was also a CVE assignment for this issue, which is already fixed in jessie: https://github.com/splitbrain/dokuwiki/issues/765
No it is not fixed in Jessie. That is, it is now, or rather, it will be when the version 0.0.20140929.a-1 I have just uploaded will reach testing.
I don't know dokuwiki, should we fix the media manager issue in wheezy?
I do not think that only affects the media manager, but I will see to fix it in stable and oldstable, yes.
Librement, -- ,--. : /` ) ن Tanguy Ortolo <xmpp:tan...@ortolo.eu> | `-' Debian Developer <irc://irc.oftc.net/Tanguy> \_
signature.asc
Description: Digital signature