Package moin
Name: moin
Description:
This package is just an umbrella for a group of other packages,
it has no description. Please select a package in "Packages in group"
for more information.
Latest version: 1.8.4-1ubuntu1.3
Ubuntu release: karmic (9.10)
Level: security
Repository: main
All versions of moin in Karmic
See all versions of moin
in all Ubuntu releases and repositories.
Links
Packages in group
python-moinmoin
Change Log
Version: 1.8.4-1ubuntu1.3
2010-08-25 16:04:26 UTC
moin (1.8.4-1ubuntu1.3) karmic-security; urgency=low
* SECURITY UPDATE: arbitrary script injection via multiple cross-site
scripting issues.
- debian/patches/30003_CVE-2010-2487,2969,2970.patch: properly escape
strings in MoinMoin/{Page,PageEditor,PageGraphicalEditor}.py,
MoinMoin/action/*.py.
- CVE-2010-2487
- CVE-2010-2969
-- Marc Deslauriers Fri, 20 Aug 2010 10:49:14 -0400
Source diff to previous version
CVE-2010-2487 Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers t
CVE-2010-2969 Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary
Version: 1.8.4-1ubuntu1.2
2010-04-08 17:01:36 UTC
moin (1.8.4-1ubuntu1.2) karmic-security; urgency=low
* SECURITY UPDATE: fix XSS in Despam action
- debian/patches/30002_CVE-2010-0828.patch: use wikiutil.escape()
in revert_pages()
- CVE-2010-0828
-- Jamie Strandboge Tue, 30 Mar 2010 13:58:02 -0500
Source diff to previous version
CVE-2010-0828 Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users
Version: 1.8.4-1ubuntu1.1
2010-03-12 01:01:12 UTC
moin (1.8.4-1ubuntu1.1) karmic-security; urgency=low
* SECURITY UPDATE: fix multiple CSRF vulnerabilities
- debian/patches/30000_CVE-2010-0668+0717.patch: add tickets to prevent
CSRF attacks in several components.
- CVE-2010-0668
* SECURITY UPDATE: properly sanitize user profiles
- debian/patches/30001_CVE-2010-0669.patch: adjust userprefs/prefs.py,
user.py and wikiutil.py to sanitize input
- CVE-2010-0669
-- Jamie Strandboge Tue, 02 Mar 2010 12:01:33 -0600
CVE-2010-0668 Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related t
CVE-2010-0669 MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
