MGASA-2014-0113

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2014-0113.html
Import Source
https://advisories.mageia.org/MGASA-2014-0113.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2014-0113
Related
Published
2014-03-02T20:53:30Z
Modified
2014-03-02T20:53:25Z
Summary
Updated mediawiki packages fix security vulnerabilities
Details

MediaWiki user Michael M reported that the fix for CVE-2013-4568 allowed insertion of escaped CSS values which could pass the CSS validation checks, resulting in XSS (CVE-2013-6451).

Chris from RationalWiki reported that SVG files could be uploaded that include external stylesheets, which could lead to XSS when an XSL was used to include JavaScript (CVE-2013-6452).

During internal review, it was discovered that MediaWiki's SVG sanitization could be bypassed when the XML was considered invalid (CVE-2013-6453).

During internal review, it was discovered that MediaWiki displayed some information about deleted pages in the log API, enhanced RecentChanges, and user watchlists (CVE-2013-6472).

Netanel Rubin from Check Point discovered a remote code execution vulnerability in MediaWiki's thumbnail generation for DjVu files. Internal review also discovered similar logic in the PdfHandler extension, which could be exploited in a similar way (CVE-2014-1610).

MediaWiki has been updated to version 1.22.2, which fixes these issues, as well as several others.

Also, the mediawiki-ldapauthentication and mediawiki-math extensions have been updated to newer versions that are compatible with MediaWiki 1.22.

Additionally, the mediawiki-graphviz extension has been obsoleted, due to the fact that it is unmaintained upstream and is vulnerable to cross-site scripting attacks.

Note: if you were using the "instances" feature in these packages to support multiple wiki instances, this feature has now been removed. You will need to maintain separate wiki instances manually.

References
Credits

Affected packages

Mageia:4 / mediawiki

Package

Name
mediawiki
Purl
pkg:rpm/mageia/mediawiki?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.22.2-1.1.mga4

Ecosystem specific 

{
    "section": "core"
}

Mageia:4 / mediawiki-ldapauthentication

Package

Name
mediawiki-ldapauthentication
Purl
pkg:rpm/mageia/mediawiki-ldapauthentication?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0f-1.1.mga4

Ecosystem specific 

{
    "section": "core"
}

Mageia:4 / mediawiki-math

Package

Name
mediawiki-math
Purl
pkg:rpm/mageia/mediawiki-math?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1-1.1.mga4

Ecosystem specific 

{
    "section": "core"
}

Mageia:3 / mediawiki

Package

Name
mediawiki
Purl
pkg:rpm/mageia/mediawiki?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.22.2-1.1.mga3

Ecosystem specific 

{
    "section": "core"
}

Mageia:3 / mediawiki-ldapauthentication

Package

Name
mediawiki-ldapauthentication
Purl
pkg:rpm/mageia/mediawiki-ldapauthentication?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0f-1.1.mga3

Ecosystem specific 

{
    "section": "core"
}

Mageia:3 / mediawiki-math

Package

Name
mediawiki-math
Purl
pkg:rpm/mageia/mediawiki-math?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1-1.1.mga3

Ecosystem specific 

{
    "section": "core"
}