1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 4318-1] moin security update

    From Salvatore Bonaccorso@1:229/2 to All on Mon Oct 15 17:50:02 2018
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4318-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2018 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : moin
    CVE ID : CVE-2017-5934
    Debian Bug : 910776

    Nitin Venkatesh discovered a cross-site scripting vulnerability in moin,
    a Python clone of WikiWiki. A remote attacker can conduct cross-site
    scripting attacks via the GUI editor's link dialogue. This only affects installations which have set up fckeditor (not enabled by default).

    For the stable distribution (stretch), this problem has been fixed in
    version 1.9.9-1+deb9u1.

    We recommend that you upgrade your moin packages.

    For the detailed security status of moin please refer to its security
    tracker page at:
    https://security-tracker.debian.org/tracker/moin

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlvEtJxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0STzA//SH6BU2ycJoFhTxefh401XXMyKBpVAp5tCKMp5wt1UF8GyTPUabTuq+hO jOmjyu/ceQ0joISCnA4vu+wC+G3hOSLCDeUQeAbcIjWOQlU0Nd1O4ZLISRZE/ebK e2P3AkOnx+6MxlKfeBKiPda7PTuhs8Aik5cGOJFQ21785vA2KAky2znhP3r8uSlZ QkSJbSxhDvSL29NUQ397vR0TxZz/q9WQkWr+DIQloS+RXEBHF4aANokHCfK4A+Kd II/ATwtd2DDhDRFcw0rPYAzR0A2CVVtnWmnXDdz7bvYYKvTGNuSTMnJmvJ85/6CW uSyf2NabRaj0bNfXoM/5I97Dk3xQEQhdFGXbrFwGQA6aPjg0w6QjHEANNMwVT9OJ wElQ3dDt/XYj+/7hoSUNiVWZQS1+d22ug3D+g5AVpszWH5GpbSXejpCEv8F4DBNx Wm7f6OEXpyAmlfHplM+yV3WelNEedMi3CKxTPaVm02HXR+aT9BNa689zM+v1b0xr iQwhkpk2wRqGcopmtgZwYgPh6PVMHoCI3qCwzBqiNrmM7NjfmGPMl9gI/eWk9yjL 7sPvtUWh+HA3ITeVMtyk13NP30IOCA1H8E1Z4l0U1tr5O+ZXyEVo1iLxEAkRNk2d GEzOkMfZb/HncBV2QKUB1nEM8MFjqDgoDacj8i0kaZXzyl8DXyc=
    =NXQ9
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)