Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2019-0301 Critical: MediaWiki Information Disclosure Risk

mageia
Calendar Grey October 23, 2019
Dist Mageia Esm H88
New MediaWiki updates tackle vulnerabilities; resolved potential information leaks associated with hidden usernames.
Updated mediawiki packages fix security vulnerability: In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup (CV...

Summary

Updated mediawiki packages fix security vulnerability:
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup (CVE-2019-16738).

References

- https://bugs.mageia.org/show_bug.cgi?id=25566

- https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/2DB7UM3U4IOADHXLTQTOGDGW6KQJNS7J/

- https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/2ZZZR4PMLJ6XIV23ORAQYYMQJGSNCEAM/

- https://www.cve.org/CVERecord?id=CVE-2019-16738

Topics%20covered

Topics Covered

security advisory critical software update information disclosure mediawiki Mageia CVE-2019-16738

Resolution

SRPMS

- 7/core/mediawiki-1.31.5-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 23 Oct 2019
URL: https://advisories.mageia.org/MGASA-2019-0301.html
Type: security
CVE: CVE-2019-16738

Topics%20covered

Topics Covered

security advisory critical software update information disclosure mediawiki Mageia CVE-2019-16738

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here