UbuntuUpdates.org

Package "python-moinmoin"

Name: python-moinmoin

Description:

Python clone of WikiWiki - library
Latest version: 1.9.9-1ubuntu1.2
Release: bionic (18.04)
Level: security
Repository: main
Head package: moin
Homepage: http://moinmo.in/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-moinmoin"

All arch deb package
APT INSTALL

Other versions of "python-moinmoin" in Bionic

Repository Area Version
base main 1.9.9-1ubuntu1
updates main 1.9.9-1ubuntu1.2

Changelog

Version: 1.9.9-1ubuntu1.2 2020-11-11 16:06:18 UTC

  moin (1.9.9-1ubuntu1.2) bionic-security; urgency=medium

  * SECURITY UPDATE: XSS vulnerability
    - debian/patches/CVE-2020-15275.patch: fix stored XSS vulnerability
      via SVG attachment in MoinMoin/config/__init__.py,
      MoinMoin/config/multiconfig.py.
    - CVE-2020-15275
  * SECURITY UPDATE: Remote code execution
    - debian/patches/CVE-2020-25074.patch: fix remote code execution
      via cache action in MoinMoin/action/cache.py.
    - CVE-2020-25074

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 10 Nov 2020 09:28:46 -0300
Source diff to previous version
CVE-2020-15275 malicious SVG attachment causing stored XSS vulnerability
CVE-2020-25074 The cache action in action/cache.py in MoinMoin through 1.9.10 allows ...

Version: 1.9.9-1ubuntu1.1 2018-10-16 15:06:28 UTC

  moin (1.9.9-1ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: XSS in GUI editor
    - debian/patches/CVE-2017-5934.patch: fix in MoinMoin/action/fckdialog.py.
    - CVE-2017-5934

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 15 Oct 2018 14:38:19 -0300
CVE-2017-5934 Cross-site scripting (XSS) vulnerability in the link dialogue in GUI ...


About   -   Send Feedback to @ubuntu_updates