oss-security - CVE request: Mediawiki

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120112083138.GA16901@inutil.org>
Date: Thu, 12 Jan 2012 09:31:38 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: oss-security@...ts.openwall.com
Subject: CVE request: Mediawiki

Hi,
please assign a CVE ID for a new security issue fixed in Mediawiki
1.17.2:

=== Security changes ===
* (bug 33117) prop=revisions allows deleted text to be exposed through
cache pollution.

http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_17_2/phase3/RELEASE-NOTES
https://bugzilla.wikimedia.org/show_bug.cgi?id=33117
https://www.mediawiki.org/wiki/Special:Code/MediaWiki/108686
https://www.mediawiki.org/wiki/Special:Code/MediaWiki/108687

Cheers,
        Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.