ALT-PU-2023-6419: package mediawiki update to version 1.40.1-alt1
Описание
This update upgrades mediawiki to version 1.40.1-alt1.
Устраненные уязвимости26
Связанные уязвимости
ALT-PU-2024-1228: package `mediawiki` update to version 1.40.1-alt2
Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.
Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.
Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.
Mediawiki v1.40.0 does not validate namespaces used in XML files. The ...