oss-sec mailing list archives

CVE request: Mediawiki


From: Moritz Muehlenhoff <jmm () debian org>
Date: Thu, 12 Jan 2012 09:31:38 +0100

Hi,
please assign a CVE ID for a new security issue fixed in Mediawiki
1.17.2:

=== Security changes ===
* (bug 33117) prop=revisions allows deleted text to be exposed through
cache pollution.

http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_17_2/phase3/RELEASE-NOTES
https://bugzilla.wikimedia.org/show_bug.cgi?id=33117
https://www.mediawiki.org/wiki/Special:Code/MediaWiki/108686
https://www.mediawiki.org/wiki/Special:Code/MediaWiki/108687

Cheers,
        Moritz


Current thread: