ikiwiki -- empty password security hole

The ikiwiki development team reports:

This hole allowed ikiwiki to accept logins using empty
passwords to openid accounts that didn’t use a password.
Upgrading to a non-vulnerable ikiwiki version immediatly is
recommended if your wiki allows both password and openid
logins.