MGASA-2022-0145

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2022-0145.html

Import Source

https://advisories.mageia.org/MGASA-2022-0145.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2022-0145

Related

Published

2022-04-18T07:42:17Z

Modified

2022-04-18T07:01:43Z

Summary

Updated mediawiki packages fix security vulnerability

Details

Title::newMainPage() goes into an infinite recursion loop if it points to a local interwiki (CVE-2022-28201).

Messages widthheight/widthheightpage/nbytes not escaped when used in galleries or Special:RevisionDelete (CVE-2022-28202).

Requesting Special:NewFiles on a wiki with many file uploads with actor as a condition can result in a DoS (CVE-2022-28203).

Special:WhatLinksHere can result in a DoS when a page is used on a extremely large number of other pages (CVE-2022-28204).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.35.6-1.mga8

{
    "section": "core"
}