Warning: Undefined array key "Description" in /var/www/www.linuxsecurity.com-443/html/lsadvisories/lsadvisories.php on line 220
Fedora 12: FEDORA-2010-5001 Important: Moin XSS Issues Patch
fedora
April 23, 2009
Update moin to 1.6.4
Summary
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large
community of users. Said in a few words, it is about collaboration on easily
editable web pages.
Update Information:
Update moin to 1.6.4. Fix the following CVEs: CVE-2008-0781 (again), CVE-2008-3381, CVE-2009-0260, CVE-2009-0312. Fix AttachFile escaping problems, upstream 1.7 changeset 5f51246a4df1 backported.
Change Log
* Mon Apr 20 2009 Ville-Pekka Vainio
References
[ 1 ] Bug #457362 - CVE-2008-3381 moin: XSS issue in the advanced search form
https://bugzilla.redhat.com/show_bug.cgi?id=457362
[ 2 ] Bug #481547 - CVE-2009-0260 moin: tachFile XSS issues
https://bugzilla.redhat.com/show_bug.cgi?id=481547
[ 3 ] Bug #432748 - CVE-2008-0781 MoinMoin multiple XSS in AttachFile action
https://bugzilla.redhat.com/show_bug.cgi?id=432748
[ 4 ] Bug #482791 - CVE-2009-0312 moin: XSS issue in antispam
https://bugzilla.redhat.com/show_bug.cgi?id=482791
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update moin' at the command line. For more information, refer to "Managing Software with yum", available at .
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: moin
Product: Fedora 10
Version: 1.6.4
Release: 1.fc10
URL: http://moinmo.in/
Summary: MoinMoin is a WikiEngine to collaborate on easily editable web pages
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!