it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Salvatore Bonaccorso <carnil AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4787-1] moin security update
- Date: Mon, 09 Nov 2020 20:27:35 +0000
- List-archive: https://lists.debian.org/msgid-search/E1kcDlH-0006yz-0Q AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version :Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=SqY6Lbxdr8Yq292yEpEbr/GeIQECV5YT5jyWY1RCZRw=; b=Cx kIp0wZORoQnMnlSl3O0Nkh4dKeF6U77xbJJjFD8yfU4QxSgbLf6jYzjWA69OTshpAHXcQM3/pdZjg zqP66nT1eB6r3vL/7EKBsTNCliUspHLk+UGxSI/7sEhZpv1N4il2Rhnrp1zC0xVO+3MwFj87W+Om+ YoIJwojo310YyTsHh8NfdDQOyDU+uAsgRo+JR2U4IaZqO2nSCmwkfM+AJG3X/u4ZS1SAi5j8EktPa HRbZYGG08gOpJ/v23ZTg0d0b9zB3la6W8JFMGXP4Zhy+u7io4Ra3ZYkcJemcc3MdYmnXMbTAgBsvy kraUVHxGbuZy6q08w0lOxcAvQ96DdVpg==;
- Old-return-path: <carnil AT seger.debian.org>
- Priority: urgent
- Resent-date: Mon, 9 Nov 2020 20:27:53 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <VENw31vKU_H.A.SfC.IZaqfB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4787-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
November 09, 2020 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : moin
CVE ID : CVE-2020-15275 CVE-2020-25074
Two vulnerabilities were discovered in moin, a Python clone of WikiWiki.
CVE-2020-15275
Catarina Leite discovered that moin is prone to a stored XSS
vulnerability via SVG attachments.
CVE-2020-25074
Michael Chapman discovered that moin is prone to a remote code
execution vulnerability via the cache action.
For the stable distribution (buster), these problems have been fixed in
version 1.9.9-1+deb10u1.
We recommend that you upgrade your moin packages.
For the detailed security status of moin please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/moin
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl+ppgtfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0RqpQ/9F4gKbiSU8XQGuaJXB8cxAXS4x1F2FBgvJb3BzbfpYrPeqcLqL0W04Mh/
yP7qp35IuC2omy56+FMg3iXL1iEJmTZwUjY0HpUdbA8ye9HllNmloPex15h12wde
5MX9AZlWLiPfzPLEx9dcNjDtoKn0u3GRKRU9sN3/NBg4Y+NKDuec0YmnOMDekjp5
+99e35l27E1CquBVt9PSTXbJ4npGcc7CFBKyIyrbsLKPa3+nKhKYdS3PDhtoODdl
OnuNtqYjk/MBR1q/oyuYtlPUhn7hiU25LUnpWnkGbpaDF83L2xCuGiqMfGarxfGI
R3hZJ6/y/03EUTHVjRDj1OHhu38JE6kI7dtuBWSSs5+SKMW7OBNhHKRxHbDj9aeE
fIkq0WDqYHsO8dkQnmA4TCNVCTMxveeUlIfErIaGI5zYptjkrdf6mLXBs0vw7ZQP
eSNzcmJHB866oUTZTugZ78MuglaFiHXrdxHfmCmC3hUfMeEGFccIDP2kO6D12yYK
/mKY8hid/+OKoGNz2q6eL/GbJ2RZaPgm4vsacIomacuGzOsVkcVYYD1BJLefR1LW
fmgiJR3KypAhGf4KKYQDCn2IMyzdF84P3hjS7VQUndw4C8T/6O+90XIM8me24xuv
/WNjNvobnNeC9NbqdUx1sWeswmtdHVM9MDw0ppLfxBdyoZluIJo=
=gS1D
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4787-1] moin security update, Salvatore Bonaccorso, 09.11.2020
Archiv bereitgestellt durch MHonArc 2.6.19.