21:13 brix 

Update to version 2.48 (security update).

If password based logins is enabled in ikiwiki, those passwords were
until this release stored in cleartext in the userdb.  To guard
against exposing users' passwords, ikiwiki now use strong (blowfish)
hashes for storing passwords.

To hash existing passwords, update to this version and run the
following command for each of your ikiwiki src dirs:

  ikiwiki-transition hashpassword /path/to/your/wiki/srcdir

Approved by:    erwin (mentor, implicit)
Security:      
http://www.vuxml.org/freebsd/90db9983-2f53-11dd-a0d8-0016d325a0ed.html

10:13 brix 

Fix empty password security hole, which affects wikis with both
password and OpenID login enabled.

Submitted by:   Joey Hess <joeyh at debian.org> (IkiWiki author)
Approved by:    erwin (mentor, implicit)
Security:      
http://www.vuxml.org/freebsd/09066828-2ef1-11dd-a0d8-0016d325a0ed.html