ALT-PU-2015-1935

Критический

ALT-PU-2015-1935: package mediawiki update to version 1.23.11-alt1

Источник

errata.altlinux.org

Дата публикации

29.10.2015

Дата обновления

29.10.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades mediawiki to version 1.23.11-alt1.

Устраненные уязвимости21

CVE-2015-2931

Средний 4.3

Дата публикации: 13.04.2015

CWE-79

Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI.

CVSS 2.0

Средний 4.3

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2015-2931 https://nvd.nist.gov/vuln/detail/CVE-2015-2931

Ссылки1

ALT-PU-2015-1935 https://errata.altlinux.org/ALT-PU-2015-1935

Связанные уязвимости

CVE-2015-2931

ubuntu

больше 11 лет назад

CVE-2015-2931

nvd

больше 11 лет назад

CVE-2015-2931

debian

больше 11 лет назад

Incomplete blacklist vulnerability in includes/upload/UploadBase.php i ...

GHSA-m3mr-7w8m-ffxc

github

больше 4 лет назад

CVE-2015-2932

ubuntu

больше 11 лет назад

Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an animated href XLink element.