Package moin
Name: moin
Description:
This package is just an umbrella for a group of other packages,
it has no description. Please select a package in "Packages in group"
for more information.
Latest version: 1.5.8-5.1ubuntu2.5
Ubuntu release: hardy (8.04)
Level: security
Repository: main
All versions of moin in Hardy
See all versions of moin
in all Ubuntu releases and repositories.
Links
Packages in group
moinmoin-common python-moinmoin
Change Log
Version: 1.5.8-5.1ubuntu2.5
2010-08-25 16:04:27 UTC
moin (1.5.8-5.1ubuntu2.5) hardy-security; urgency=low
* SECURITY UPDATE: arbitrary script injection via multiple cross-site
scripting issues.
- debian/patches/30009_CVE-2010-2487,2969,2970.patch: properly escape
strings in MoinMoin/{Page,PageEditor,PageGraphicalEditor}.py,
MoinMoin/action/*.py.
- CVE-2010-2487
- CVE-2010-2969
-- Marc Deslauriers Fri, 20 Aug 2010 13:37:52 -0400
Source diff to previous version
CVE-2010-2487 Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers t
CVE-2010-2969 Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary
Version: 1.5.8-5.1ubuntu2.4
2010-04-08 17:01:44 UTC
moin (1.5.8-5.1ubuntu2.4) hardy-security; urgency=low
* SECURITY UPDATE: fix XSS in Despam action
- debian/patches/30008_CVE-2010-0828.patch: use wikiutil.escape()
in revert_pages()
- CVE-2010-0828
-- Jamie Strandboge Tue, 30 Mar 2010 13:51:01 -0500
Source diff to previous version
CVE-2010-0828 Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users
Version: 1.5.8-5.1ubuntu2.3
2010-03-12 01:01:24 UTC
moin (1.5.8-5.1ubuntu2.3) hardy-security; urgency=low
* SECURITY UPDATE: fix multiple CSRF vulnerabilities
- debian/patches/30006_CVE-2010-0668.patch: add tickets to prevent CSRF
attacks in several components.
- CVE-2010-0668
* SECURITY UPDATE: properly sanitize user profiles
- debian/patches/30007_CVE-2010-0669.patch: adjust userprefs/prefs.py,
user.py and wikiutil.py to sanitize input
- CVE-2010-0669
-- Jamie Strandboge Tue, 09 Mar 2010 15:22:12 -0600
CVE-2010-0668 Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related t
CVE-2010-0669 MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
