Updated mediawiki packages fix security vulnerabilities

Updated mediawiki packages fix security vulnerabilities: Potential XSS in jQuery CVE-2019-11358. An account can be logged out without using a token CSRF CVE-2019-12466. A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them CVE-2019-12467. Directly...

CVE-2019-12466

MediaWiki before 1.32.2 is affected by CVE-2019-12466: a cross‑site request forgery in the logout feature that can occur without a token. The initial description states CSRF in MediaWiki 1.32.1 and prior. Connected advisories confirm fixes in newer releases (e.g., Mageia lists 1.32.2-alt1; Debian...

CVE-2019-12466

Wikimedia MediaWiki through 1.32.1 allows CSRF...

Security fix for the ALT Linux 9 package mediawiki version 1.32.2-alt1

1.32.2-alt1 built June 13, 2019 Vitaly Lipatov in task 231690 June 6, 2019 Vitaly Lipatov - new version 1.32.2 with rpmrb script - CVE-2019-12468, CVE-2019-12473, CVE-2019-12471 - CVE-2019-12472, CVE-2019-12474, CVE-2019-12467 - CVE-2019-12466, CVE-2019-12469, CVE-2019-12470 - CVE-2019-11358...

[SECURITY] [DSA 4460-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 12, 2019 https://www.debian.org/security/faq -...