Ubuntu 18.04/16.04 LTS: USN-4629-1 Moderate: MoinMoin Code Execution

ubuntu

November 11, 2020

Several security issues were fixed in MoinMoin.

Summary

Several security issues were fixed in MoinMoin.

Software Description:

- moin: Collaborative hypertext environment

Details:

Michael Chapman discovered that MoinMoin incorrectly handled certain cache actions.

An attacker could possibly use this issue to execute arbitrary code.

(CVE-2020-25074)

Catarina Leite discovered that MoinMoin incorrectly handled certain SVG files.

An attacker could possibly use this issue to execute arbitrary code.

(CVE-2020-15275)

Topics Covered

security advisory code execution Ubuntu moin cache issue SVG issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  python-moinmoin                 1.9.9-1ubuntu1.2

Ubuntu 16.04 LTS:
  python-moinmoin                 1.9.8-1ubuntu1.16.04.3

In general, a standard system update will make all the necessary changes.