Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 11 MediaWiki 1.15.1 Security Update: XSS Issue Fix

fedora
Calendar Grey July 19, 2009
Dist Fedora Esm H88
Enhance your MediaWiki to version 1.15.1 on Fedora, addressing XSS vulnerabilities and bolstering security. Apply updates for optimal performance.
This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1

Summary

MediaWiki is the software used for Wikipedia and the other Wikimedia

Foundation websites. Compared to other wikis, it has an excellent

range of features and support for high-traffic websites using multiple

servers

This package supports wiki farms. Copy /var/www/wiki over to the

desired wiki location and configure it through the web

interface. Remember to remove the config dir after completing the

configuration.

Update Information:

This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting (XSS) vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases are affected.

Topics%20covered

Topics Covered

security advisory fedora update xss bugfix mediawiki

Change Log

* Mon Jul 13 2009 Axel Thimm - 1.15.1-48 - Update to 1.15.1 (Fixes XSS vulnerability). * Sat Jul 11 2009 Axel Thimm - 1.15.0-47 - Fix api.php breakage. * Sat Jun 13 2009 Axel Thimm - 1.15.0-46 - Update to 1.15.0. * Thu Apr 16 2009 S390x secondary arch maintainer - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs (added sparc64 per request from the sparc maintainer)

References


[ 1 ] Bug #484855 - mediawiki api.php has bad path https://bugzilla.redhat.com/show_bug.cgi?id=484855 [ 2 ] Bug #494362 - maintenance scripts fail https://bugzilla.redhat.com/show_bug.cgi?id=494362 [ 3 ] Bug #494880 - Uploading fails https://bugzilla.redhat.com/show_bug.cgi?id=494880

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mediawiki' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mediawiki
Product: Fedora 11
Version: 1.15.1
Release: 48.fc11
URL: https://www.mediawiki.org/wiki/MediaWiki
Summary: A wiki engine

Topics%20covered

Topics Covered

security advisory fedora update xss bugfix mediawiki

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here