Bug 1125111 (CVE-2014-5241, CVE-2014-5242, CVE-2014-5243)
| Summary: | CVE-2014-5241,CVE-2014-5242,CVE-2014-5243 mediawiki: security issues fixed in the 1.19.18, 1.22.9, and 1.23.2 releases | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Murray McAllister <mmcallis> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | extras-orphan, gwync, ian, mike, puiterwijk, vkaigoro |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | mediawiki 1.19.18, mediawiki 1.22.9, mediawiki 1.23.2 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-05-27 20:56:09 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1125112, 1125113, 1125114, 1125115 | ||
| Bug Blocks: | |||
|
Description
Murray McAllister
2014-07-31 04:53:41 UTC
Created mediawiki tracking bugs for this issue: Affects: fedora-all [bug 1125112] Affects: epel-5 [bug 1125113] Created mediawiki119 tracking bugs for this issue: Affects: epel-5 [bug 1125114] Affects: epel-6 [bug 1125115] MITRE has assigned below CVEs to the issues: * (bug 68187) SECURITY: Prepend jsonp callback with comment. - CVE-2014-5241 * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked. - CVE-2014-5242 * (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput. - CVE-2014-5243 mediawiki-1.23.2-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report. mediawiki-1.23.2-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report. mediawiki119-1.19.20-1.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report. Fixed previously |