Lucene search
SuseOPENSUSE-SU-2020:1998-1HistoryNov 23, 2020 - 12:00 a.m.
Security update for moinmoin-wiki (important)
2020-11-2300:00:00
lists.opensuse.org
9
0.014 Low
EPSS
Percentile
86.3%
An update that fixes two vulnerabilities is now available.
Description:
This update for moinmoin-wiki fixes the following issues:
- update to version 1.9.11: CVE-2020-25074 (boo#1178744): fix remote code
execution via cache action CVE-2020-15275 (boo#1178745): fix malicious
SVG attachment causing stored XSS vulnerability
This update was imported from the openSUSE:Leap:15.2:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Backports SLE-15-SP2:
zypper in -t patch openSUSE-2020-1998=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Backports SLE | 15-SP2 | noarch | - opensuse backports sle | < 15-SP2 (noarch): | - openSUSE Backports SLE-15-SP2 (noarch):.noarch.rpm |
Related
osv
osv
moin - security update
2020-11-10 00:00:00
moin vulnerabilities
2020-11-11 13:46:22
moin - security update
2020-11-09 00:00:00
openvas
openvas
MoinMoin < 1.9.11 Multiple Vulnerabilities - Linux
2020-11-11 00:00:00
Ubuntu: Security Advisory (USN-4629-1)
2020-11-12 00:00:00
Debian: Security Advisory (DLA-2446-1)
2020-11-11 00:00:00
ubuntu
ubuntu
MoinMoin vulnerabilities
2020-11-11 00:00:00
nessus
nessus
Debian DLA-2446-1 : moin security update
2020-11-12 00:00:00
Debian DSA-4787-1 : moin - security update
2020-11-10 00:00:00
debian
debian
[SECURITY] [DSA 4787-1] moin security update
2020-11-09 20:27:35
[SECURITY] [DLA 2446-1] moin security update
2020-11-10 21:43:54
[SECURITY] [DSA 4787-1] moin security update
2020-11-09 20:27:35
suse
suse
Security update for moinmoin-wiki (important)
2020-11-19 00:00:00
freebsd
freebsd
moinmoin -- multiple vulnerabilities
2020-11-08 00:00:00
debiancve
debiancve
CVE-2020-25074
2020-11-10 17:15:12
CVE-2020-15275
2020-11-11 16:15:13
ubuntucve
ubuntucve
CVE-2020-25074
2020-11-09 00:00:00
CVE-2020-15275
2020-11-09 00:00:00
prion
prion
Directory traversal
2020-11-10 17:15:00
Design/Logic Flaw
2020-11-11 16:15:00
cve
cve
CVE-2020-25074
2020-11-10 17:15:12
CVE-2020-15275
2020-11-11 16:15:13
github
github
remote code execution via cache action in MoinMoin
2020-11-11 15:54:51
malicious SVG attachment causing stored XSS vulnerability
2020-11-11 15:54:41
veracode
veracode
Remote Code Execution
2020-11-10 03:43:34
Cross-Site Scripting
2020-11-10 03:54:16
cvelist
cvelist
CVE-2020-25074
2020-11-10 16:48:21
nvd
nvd
CVE-2020-25074
2020-11-10 17:15:12
CVE-2020-15275
2020-11-11 16:15:13
redhatcve
redhatcve
CVE-2020-15275
2022-05-21 00:23:34