Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate notification

Critical MediaWiki Security Advisory for Fedora 31: Permission Check Issue

== Security fixes == * (T230402, CVE-2019-16738) SECURITY: Add permission check for suppressed account to Special:Redirect. == Links to all mentioned tasks == * * . --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-3ba38e1cdb 2019-10-26 17:17:38.269647 --------------------------------------------------------------------------------Name : mediawiki Product : Fedora 31 Version : 1.32.4 Release : 1.fc31 URL : https://www.mediawiki.org/wiki/MediaWiki Summary : A wiki engine Description : MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances under /usr/share/doc/mediawiki/README.RPM. Remember to remove the config dir after completing the configuration. --------------------------------------------------------------------------------Update Information: == Security fixes == * (T230402, CVE-2019-16738) SECURITY: Add permission check for suppressed account to Special:Redirect. == Links to all mentioned tasks == * * --------------------------------------------------------------------------------ChangeLog: * Mon Oct 7 2019 Michael Cronenworth - 1.32.4-1 - Update to 1.32.4 - https://lists.wikimedia.org/hyperkitty/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/2DB7UM3U4IOADHXLTQTOGDGW6KQJNS7J/ --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-3ba38e1cdb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by theFedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Urgent security patch for MediaWiki in Fedora 31, fixing authorization validation concerns for hidden user accounts.. MediaWiki update, Fedora 31 security, permission audit, wiki security. . Severity: Critical. LinuxSecurity.com Team

Oct 26, 2019 •Critical Fedora