Stay Secure with the Latest Linux Advisories

security advisoryinformation disclosuremediawiki

Mageia: 2020-0292 Moderate: MediaWiki Information Disclosure

Updated mediawiki packages fix security vulnerability: In MediaWiki before 1.31.8, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This . MGASA-2020-0292 - Updated mediawiki packages fix security vulnerability Publication date: 10 Jul 2020 URL: https://advisories.mageia.org/MGASA-2020-0292.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-XXXX Updated mediawiki packages fix security vulnerability: In MediaWiki before 1.31.8, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled (CVE-2020-15005). References: - https://bugs.mageia.org/show_bug.cgi?id=26921 - https://lists.wikimedia.org/hyperkitty/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/X4YHE5EVSEZFBQS2NRUDPN5VIL3EFKLR/ - https://www.cve.org/CVERecord?id=CVE-2019-XXXX SRPMS: - 7/core/mediawiki-1.31.8-1.mga7 . Mageia discovers and resolves a significant security vulnerability in MediaWiki that impacts private wikis secured by caching servers.. MediaWiki Security Update, Cache Vulnerability, Mageia Security Advisory. . LinuxSecurity.com Team

Jul 10, 2020 Mageia