| Summary: | <www-apps/ikiwiki-3.20170111: authorization bypass when reverting changes (CVE-2016-10026) | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | minor | CC: | alicef |
| Priority: | Normal | Flags: | stable-bot:
sanity-check+
|
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.openwall.com/lists/oss-security/2016/12/20/7 | ||
| Whiteboard: | B3 [noglsa cve] | ||
| Package list: |
=www-apps/ikiwiki-3.20170111
|
Runtime testing required: | --- |
@ Maintainer(s): Please bump to >=www-apps/ikiwiki-3.20161219 bumped to www-apps/ikiwiki-3.20170111 @ Arches, please test and mark stable: =www-apps/ikiwiki-3.20170111 amd64 stable. Maintainer(s), please cleanup. Security, please vote. cleaned GLSA Vote: No |
From ${URL} : Reference: http://ikiwiki.info/bugs/rcs_revert_can_bypass_authorization_if_affected_files_were_renamed/ Vulnerable versions: < 3.20161219 Fixed versions: >= 3.20161219 Fix: http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=9cada49ed6ad24556dbe9861ad5b0a9f526167f9 ikiwiki is a static site generator with some dynamic features, used for wikis, blogs and other websites. intrigeri discovered that on sites with the git and recentchanges plugins and the CGI interface enabled, the revert links on the RecentChanges page could revert changes on a page the logged-in user cannot legitimately edit, if the change being reverted was made before the page was renamed from a location that the logged-in user *could* legitimately edit. @maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.