Bug 1208072 (CVE-2014-9714, CVE-2015-2931, CVE-2015-2932, CVE-2015-2933, CVE-2015-2934, CVE-2015-2935, CVE-2015-2936, CVE-2015-2937, CVE-2015-2938, CVE-2015-2939, CVE-2015-2940, CVE-2015-2941, CVE-2015-2942) - mediawiki: mediawiki: security issues fixed in the 1.24.2, 1.23.9, and 1.19.24 releases
Summary: mediawiki: mediawiki: security issues fixed in the 1.24.2, 1.23.9, and 1.19.2...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2014-9714, CVE-2015-2931, CVE-2015-2932, CVE-2015-2933, CVE-2015-2934, CVE-2015-2935, CVE-2015-2936, CVE-2015-2937, CVE-2015-2938, CVE-2015-2939, CVE-2015-2940, CVE-2015-2941, CVE-2015-2942
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1208073 1208074
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-04-01 10:31 UTC by Martin Prpič
Modified: 2019-09-29 13:31 UTC (History)
4 users (show)

Fixed In Version: mediawiki 1.24.2, mediawiki 1.23.9, mediawiki 1.19.24
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-05-27 20:56:37 UTC
Embargoed:

Attachments (Terms of Use)

Description Martin Prpič 2015-04-01 10:31:22 UTC 
MediaWiki releases 1.24.2, 1.23.9, and 1.19.24 fix a number of security flaws:

https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html
Comment 1 Martin Prpič 2015-04-01 10:32:16 UTC 
Created mediawiki tracking bugs for this issue:

Affects: fedora-all [bug 1208073]
Comment 2 Martin Prpič 2015-04-01 10:32:18 UTC 
Created mediawiki119 tracking bugs for this issue:

Affects: epel-6 [bug 1208074]
Comment 3 Martin Prpič 2015-04-01 10:33:58 UTC 
CVE request: http://seclists.org/oss-sec/2015/q2/0
Comment 4 Vasyl Kaigorodov 2015-04-08 09:24:56 UTC 
14 CVEs were assigned: http://seclists.org/oss-sec/2015/q2/61
Comment 5 Fedora Update System 2015-04-18 09:37:03 UTC 
mediawiki-1.23.9-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 6 Fedora Update System 2015-04-18 09:53:40 UTC 
mediawiki-1.24.2-1.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 7 Fedora Update System 2015-04-21 19:30:18 UTC 
mediawiki-1.24.2-1.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 8 Patrick Uiterwijk 2015-05-27 20:56:37 UTC 
Fixed previously.
Note You need to log in before you can comment on or make changes to this bug.