[Mediawiki-l] TWiki security fix (was Re: Multiple languages)

Brion Vibber brion at pobox.com
Sat Nov 20 19:42:23 UTC 2004


On Nov 20, 2004, at 10:20 AM, Kiss All wrote:
> You'd better look at twiki first before deciding on using mediawiki if
> you need good a permission control. But the formatting rules in twiki
> look stupid  somehow.

If you are using TWiki or do so in the future, remember to list 
yourself at http://twiki.org/cgi-bin/view/Main/TWikiInstallation in the 
hopes they notify you about security fixes, or else watch this page 
like a hawk:
http://twiki.org/cgi-bin/view/Codev/TWikiSecurityAlerts

You won't find a hint of it on their main page, but there's a *remote 
shell exploit* in TWiki's search mechanism, for which a patch was 
released a few days ago. If anyone on this list is also running a TWiki 
or knowns someone who is, please make sure you install the fix!

-- brion vibber (brion @ pobox.com)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.wikimedia.org/pipermail/mediawiki-l/attachments/20041120/c3e1d1fa/attachment.pgp 


More information about the MediaWiki-l mailing list