On Nov 20, 2004, at 10:20 AM, Kiss All wrote:
> You'd better look at twiki first before deciding on using mediawiki if
> you need good a permission control. But the formatting rules in twiki
> look stupid somehow.
If you are using TWiki or do so in the future, remember to list
yourself at http://twiki.org/cgi-bin/view/Main/TWikiInstallation in the
hopes they notify you about security fixes, or else watch this page
like a hawk:
http://twiki.org/cgi-bin/view/Codev/TWikiSecurityAlerts
You won't find a hint of it on their main page, but there's a *remote
shell exploit* in TWiki's search mechanism, for which a patch was
released a few days ago. If anyone on this list is also running a TWiki
or knowns someone who is, please make sure you install the fix!
-- brion vibber (brion @ pobox.com)
> You'd better look at twiki first before deciding on using mediawiki if
> you need good a permission control. But the formatting rules in twiki
> look stupid somehow.
If you are using TWiki or do so in the future, remember to list
yourself at http://twiki.org/cgi-bin/view/Main/TWikiInstallation in the
hopes they notify you about security fixes, or else watch this page
like a hawk:
http://twiki.org/cgi-bin/view/Codev/TWikiSecurityAlerts
You won't find a hint of it on their main page, but there's a *remote
shell exploit* in TWiki's search mechanism, for which a patch was
released a few days ago. If anyone on this list is also running a TWiki
or knowns someone who is, please make sure you install the fix!
-- brion vibber (brion @ pobox.com)
Attached Files:
-
PGP.sig (0.18 KB)