diff options
| author | intrigeri <intrigeri@boum.org> | 2008-11-13 04:39:53 +0100 |
|---|---|---|
| committer | intrigeri <intrigeri@boum.org> | 2008-11-13 04:39:53 +0100 |
| commit | 3190e5cea75a43d38f58b8a45fbc87d5527d18f0 (patch) | |
| tree | 8f305a6db081f7832c7feaa4b8322cefdfc26cbc /doc/security.mdwn | |
| parent | 5eed0fd97d3f1abcfce3288df9aeeed50967757c (diff) | |
| parent | 699aa79c2e2dbec02a38ba6ff32e9c861ee9f7be (diff) | |
Merge commit 'upstream/master' into prv/po
Diffstat (limited to 'doc/security.mdwn')
| -rw-r--r-- | doc/security.mdwn | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/security.mdwn b/doc/security.mdwn index 0841abf49..b067a8a16 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -407,3 +407,13 @@ discovered on 30 May 2008 and fixed the same day. ([[!cve CVE-2008-0169]]) I recommend upgrading to 2.48 immediatly if your wiki allows both password and openid logins. + +## Malformed UTF-8 DOS + +Feeding ikiwiki page sources containing certian forms of malformed UTF-8 +can cause it to crash. This can potentially be used for a denial of service +attack. + +intrigeri discovered this problem on 12 Nov 2008 and a patch put in place +later that day, in version 2.70. The fix was backported to testing as version +2.53.2, and to stable as version 1.33.7. |