Fedora 24: FEDORA-2016-608be17784 Moderate Risk in python-wikitcms Code
fedora
December 27, 2016
This update contains a **SECURITY** fix for an issue with potentially serious consequences but very limited scope
Summary
python-wikitcms is a library for interacting with Fedora's wiki-based 'test
management' system. It can:
* Create the pages for release validation test events
* Find existing release validation event pages, in various ways
* Report test results
The wiki-based test management system itself is documented at:
https://fedoraproject.org/wiki/Wikitcms
Update Information:
This update contains a **SECURITY** fix for an issue with potentially serious
consequences but very limited scope. If an administrator of a wiki you talked to
using python-wikitcms were malicious, they could cause arbitrary code execution
as the user running wikitcms. No-one besides a wiki administrator could do this,
as it requires crafting the wiki's response to an edit request to include a
malicious payload. It also drops some now useless or unneeded code (due to
changes in mediawiki and mwclient).
Change Log
References
Fedora Update Notification FEDORA-2016-608be17784 2016-12-27 18:30:41.362689
Name : python-wikitcms Product : Fedora 24 Version : 2.1.10 Release : 1.fc24 URL : https://pagure.io/fedora-qa/python-wikitcms Summary : Fedora QA wiki test management Python library Description : python-wikitcms is a library for interacting with Fedora's wiki-based 'test management' system. It can:
* Create the pages for release validation test events * Find existing release validation event pages, in various ways * Report test results
The wiki-based test management system itself is documented at: https://fedoraproject.org/wiki/Wikitcms
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-wikitcms' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Name: python-wikitcms
Product: Fedora 24
Version: 2.1.10
Release: 1.fc24
Summary: Fedora QA wiki test management Python library
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!