-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4301-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : mediawiki CVE ID : CVE-2018-0503 CVE-2018-0504 CVE-2018-0505 Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which result in incorrectly configured rate limits, information disclosure in Special:Redirect/logid and bypass of an account lock. For the stable distribution (stretch), these problems have been fixed in version 1:1.27.5-1~deb9u1. We recommend that you upgrade your mediawiki packages. For the detailed security status of mediawiki please refer to its security tracker page at: https://security-tracker.debian.org/tracker/mediawiki Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlumW8IACgkQEMKTtsN8 TjaW2w/9HyKlT1w5/8PLcqpDrH+odjkDhXV4kTCA5f+EKhOayJzZ4yQzpw5nSDm9 GeDIm7lmGu2fkQRPin9b1WboVg7FwBPZjLZKLhbo4L3yhYpmT67OzpI88OXGH/j6 CGc/0kdQHvWxuHy/FCZMbqvVGQ8XV5iHV8fPaSVKVB93vWhbHavKhqL+JZepePDz +HPDW3N97p6vPlUdclmQSMfWDjBJUrzrdy5rBsKs4gLZRLuq8QMbTuQoHIkIgMWT pIVtWZw/LYHd8TlSHb1nQ0WHy01Rs2CONY6ylb7nqqx5YjO9FlBAHW8iUTdmS9rs V63XjDiAMn6MBeopgWCK+SoOIJ19GeItWn9JTX5Q3+SKl+J9+v3yeLTa5Dwzo+lr Ruw0tW1GbZtwozjtCO4CPtuet1rY+8Zd24pii1TcKAuhXOpwY3Vwa0fHBnOELZXK 8lwyfMoGiow5tf3b/6XOPAUMSBcIGutjvfmKZ64LvScspxN/hTzx0w+MgDKhy69a skT24KTGvhMtb/HZxg7anOZPTUzmSOhZXrdbWPv0oZSLIshMo/+LPG1ypjAloPH5 Hn7oOSXk3bVvcOCRCA68r+HVlySLQckxBjTEg3Isz6AK62CYRlBCTMpHly5xkpBo IsGeUlQNAmo1zTEJHxHXwHH5QVpmBGPi/pxIvA+BNv+AJ8SyZMU= =Q4d3 -----END PGP SIGNATURE-----
