--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-0400
2014-01-29 19:38:20
--------------------------------------------------------------------------------
Name : mediawiki119
Product : Fedora EPEL 5
Version : 1.19.11
Release : 2.el5
URL :
http://www.mediawiki.org/
Summary : A wiki engine
Description :
MediaWiki is the software used for Wikipedia and the other Wikimedia
Foundation websites. Compared to other wikis, it has an excellent
range of features and support for high-traffic websites using multiple
servers
--------------------------------------------------------------------------------
Update Information:
- Update to 1.19.11
- (bug 60339) (CVE-2014-1610) SECURITY: Reported RCE in djvu thumbnailing
- Provide mediawiki
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1058981 - CVE-2014-1610 mediawiki: remote code execution via uploaded DjVu or
PDF files
https://bugzilla.redhat.com/show_bug.cgi?id=1058981
[ 2 ] Bug #1030987 - CVE-2013-4567 CVE-2013-4568 CVE-2013-4572 mediawiki: security
releases 1.21.3, 1.20.8, and 1.19.9
https://bugzilla.redhat.com/show_bug.cgi?id=1030987
[ 3 ] Bug #1052962 - CVE-2013-6451 CVE-2013-6452 CVE-2013-6453 CVE-2013-6454
CVE-2013-6472 mediawiki: security releases 1.22.1, 1.21.4 and 1.19.10
https://bugzilla.redhat.com/show_bug.cgi?id=1052962
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mediawiki119' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------