USN-3137-1: MoinMoin vulnerabilities
USN-3137-1: MoinMoin vulnerabilities Ubuntu Security Notice USN-3137-1 23rd November, 2016 moin vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Several security issues were fixed in MoinMoin. Software description moin – Collaborative hypertext environment Details It was discovered that MoinMoin did not properly sanitize certain inputs,resulting in cross-site scripting (XSS) vulnerabilities. With cross-sitescripting vulnerabilities, if a user were tricked into viewing serveroutput during a crafted server request, a remote attacker could exploitthis to modify the contents, or steal confidential data, within the samedomain. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.10: python-moinmoin 1.9.8-1ubuntu1.16.10.1 Ubuntu 16.04 LTS: python-moinmoin 1.9.8-1ubuntu1.16.04.1 Ubuntu 14.04 LTS: python-moinmoin 1.9.7-1ubuntu2.1 Ubuntu 12.04 LTS: python-moinmoin 1.9.3-1ubuntu2.3 To update your system, please follow these [ more… ]