ALT-PU-2024-1228: package mediawiki update to version 1.40.1-alt2
Описание
This update upgrades mediawiki to version 1.40.1-alt2.
Устраненные уязвимости70
Ссылки7
GHSA-5vj8-g3qg-4qh6
https://github.com/advisories/GHSA-5vj8-g3qg-4qh6GHSA-9jxr-mwpp-w643
https://github.com/advisories/GHSA-9jxr-mwpp-w643GHSA-fmrf-p77g-vv5c
https://github.com/advisories/GHSA-fmrf-p77g-vv5cGHSA-w5fx-cx7f-6vr9
https://github.com/advisories/GHSA-w5fx-cx7f-6vr9GHSA-wjfc-pgfp-pv9c
https://github.com/advisories/GHSA-wjfc-pgfp-pv9cGHSA-wxmh-65f7-jcvw
https://github.com/advisories/GHSA-wxmh-65f7-jcvwСвязанные уязвимости
ALT-PU-2022-3361: package `mediawiki` update to version 1.39.0-alt1
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
HackerOne: CVE-2022-27776 Insufficiently protected credentials vulnerability might leak authentication or cookie header data