Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Ubuntu 18.04 LTS: USN-3794-1 Moderate: MoinMoin Data Exposure

Ubuntu Large Esm H500
MoinMoin could be made to expose sensitive information if it received a specially crafted input.
=========================================================================Ubuntu Security Notice USN-3794-1
October 16, 2018

moin vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

MoinMoin could be made to expose sensitive information if it
received a specially crafted input.

Software Description:
- moin: Collaborative hypertext environment

Details:

It was discovered that MoinMoin incorrectly handled certain inputs.
An attacker could possibly use this issue to access sensitive
information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  python-moinmoin                 1.9.9-1ubuntu1.1

Ubuntu 16.04 LTS:
  python-moinmoin                 1.9.8-1ubuntu1.16.04.2

Ubuntu 14.04 LTS:
  python-moinmoin                 1.9.7-1ubuntu2.2

In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-3794-1
  CVE-2017-5934

Package Information:
  https://launchpad.net/ubuntu/+source/moin/1.9.9-1ubuntu1.1
  https://launchpad.net/ubuntu/+source/moin/1.9.8-1ubuntu1.16.04.2
  https://launchpad.net/ubuntu/+source/moin/1.9.7-1ubuntu2.2

Ubuntu 18.04 LTS: USN-3794-1 Moderate: MoinMoin Data Exposure

ubuntu
Calendar Grey October 16, 2018
Dist Ubuntu Esm H88
Recent security flaw in MoinMoin affecting various Ubuntu distributions reveals confidential information via specially crafted requests. Update guidelines included.
MoinMoin could be made to expose sensitive information if it received a specially crafted input.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS:   python-moinmoin                 1.9.9-1ubuntu1.1 Ubuntu 16.04 LTS:   python-moinmoin                 1.9.8-1ubuntu1.16.04.2 Ubuntu 14.04 LTS:   python-moinmoin                 1.9.7-1ubuntu2.2 In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3794-1

  CVE-2017-5934

October 16, 2018

Package Information

  https://launchpad.net/ubuntu/+source/moin/1.9.9-1ubuntu1.1   https://launchpad.net/ubuntu/+source/moin/1.9.8-1ubuntu1.16.04.2   https://launchpad.net/ubuntu/+source/moin/1.9.7-1ubuntu2.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here