Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity patch

Mageia 8 MGASA-2022-0338 Moderate: MediaWiki Security Fix

Username is not escaped in the "welcomeuser" message (T308471). Bundled guzzlehttp/guzzle has been updated to 6.5.8, fixing several issues (CVE-2022-29248, CVE-2022-31042, CVE-2022-31043, CVE-2022-31090, CVE-2022-31091). . MGASA-2022-0338 - Updated mediawiki packages fix security vulnerability Publication date: 16 Sep 2022 URL: https://advisories.mageia.org/MGASA-2022-0338.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-29248, CVE-2022-31042, CVE-2022-31043, CVE-2022-31090, CVE-2022-31091 Username is not escaped in the "welcomeuser" message (T308471). Bundled guzzlehttp/guzzle has been updated to 6.5.8, fixing several issues (CVE-2022-29248, CVE-2022-31042, CVE-2022-31043, CVE-2022-31090, CVE-2022-31091). References: - https://bugs.mageia.org/show_bug.cgi?id=30837 - https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3 - https://github.com/guzzle/guzzle/security/advisories/GHSA-w248-ffj2-4v5q - https://github.com/guzzle/guzzle/security/advisories/GHSA-f2wf-25xc-69c9 - https://github.com/guzzle/guzzle/security/advisories/GHSA-q559-8m2m-g699 - https://github.com/guzzle/guzzle/security/advisories/GHSA-25mq-v84q-4j7r - https://lists.wikimedia.org/hyperkitty/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/PIPYDRSHXOYW5DB7X755QDNUV5EZWPWB/ - https://www.cve.org/CVERecord?id=CVE-2022-29248 - https://www.cve.org/CVERecord?id=CVE-2022-31042 - https://www.cve.org/CVERecord?id=CVE-2022-31043 - https://www.cve.org/CVERecord?id=CVE-2022-31090 - https://www.cve.org/CVERecord?id=CVE-2022-31091 SRPMS: - 8/core/mediawiki-1.35.7-1.mga8 . Mageia 2022-0340 updates PHP packages to enhance performance with various improvements for optimal functionality.. Mageia MediaWiki Update, Guzzle Vulnerability Fix, Security Advisory. . LinuxSecurity.com Team

Sep 16, 2022 Mageia