From cbf465dfa79da75208ee2a50bc61bf9117630dc5 Mon Sep 17 00:00:00 2001 From: schmonz Date: Thu, 12 Jan 2017 00:44:15 +0000 Subject: Update to 3.20170111. From the changelog: * passwordauth: prevent authentication bypass via multiple name parameters (CVE-2017-0356, OVE-20170111-0001) * passwordauth: avoid userinfo forgery via repeated email parameter (also in the scope of CVE-2017-0356) * CGI, attachment, passwordauth: harden against repeated parameters (not believed to have been a vulnerability) * remove: make it clearer that repeated page parameter is OK here * t/passwordauth.t: new automated test for passwordauth --- www/ikiwiki/distinfo | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'www/ikiwiki/distinfo') diff --git a/www/ikiwiki/distinfo b/www/ikiwiki/distinfo index 8ab49c0c2cf..02d1218a75e 100644 --- a/www/ikiwiki/distinfo +++ b/www/ikiwiki/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.119 2017/01/11 02:15:54 schmonz Exp $ +$NetBSD: distinfo,v 1.120 2017/01/12 00:44:15 schmonz Exp $ -SHA1 (ikiwiki_3.20170110.tar.xz) = 8815a58859375c1c27f2c026d3529d88fc694ff8 -RMD160 (ikiwiki_3.20170110.tar.xz) = 9ddbde0c1a592318d952801f8bddddf3b5522cc7 -SHA512 (ikiwiki_3.20170110.tar.xz) = d614e41175cf2c135bb46e8d3ebc1f21988e23ab5c075c3c6c59c85bcab43efce16d443092e9be8b0ef102b94978905f783baf1e3c430760a9a06b3e7f6065eb -Size (ikiwiki_3.20170110.tar.xz) = 2613204 bytes +SHA1 (ikiwiki_3.20170111.tar.xz) = c6df014617d3ac5e6c57eb573f02cc4cf71e9b7b +RMD160 (ikiwiki_3.20170111.tar.xz) = a15bdf28eb6f1c857b8faccc2fba368892b0d597 +SHA512 (ikiwiki_3.20170111.tar.xz) = 78c2a624684bb1c34878ff008558a3967f6e7f5648878e931961695e582a40e4351b6e467c64ca42ba99cb403fd275265bd5d96ecd860ad8263043514d207ad4 +Size (ikiwiki_3.20170111.tar.xz) = 2614240 bytes -- cgit v1.2.3