UbuntuUpdates.org

Package "moin"

Name: moin

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Python clone of WikiWiki - library
Latest version: 1.9.9-1ubuntu1.2
Release: bionic (18.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "moin" in Bionic

Repository Area Version
base main 1.9.9-1ubuntu1
updates main 1.9.9-1ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.9.9-1ubuntu1.2 2020-11-11 16:06:18 UTC

  moin (1.9.9-1ubuntu1.2) bionic-security; urgency=medium

  * SECURITY UPDATE: XSS vulnerability
    - debian/patches/CVE-2020-15275.patch: fix stored XSS vulnerability
      via SVG attachment in MoinMoin/config/__init__.py,
      MoinMoin/config/multiconfig.py.
    - CVE-2020-15275
  * SECURITY UPDATE: Remote code execution
    - debian/patches/CVE-2020-25074.patch: fix remote code execution
      via cache action in MoinMoin/action/cache.py.
    - CVE-2020-25074

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 10 Nov 2020 09:28:46 -0300
Source diff to previous version
CVE-2020-15275 malicious SVG attachment causing stored XSS vulnerability
CVE-2020-25074 The cache action in action/cache.py in MoinMoin through 1.9.10 allows ...

Version: 1.9.9-1ubuntu1.1 2018-10-16 15:06:28 UTC

  moin (1.9.9-1ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: XSS in GUI editor
    - debian/patches/CVE-2017-5934.patch: fix in MoinMoin/action/fckdialog.py.
    - CVE-2017-5934

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 15 Oct 2018 14:38:19 -0300
CVE-2017-5934 Cross-site scripting (XSS) vulnerability in the link dialogue in GUI ...


About   -   Send Feedback to @ubuntu_updates