From owner-svn-ports-head@freebsd.org Thu Dec 24 13:54:43 2015 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 06203A51125; Thu, 24 Dec 2015 13:54:43 +0000 (UTC) (envelope-from junovitch@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D512C1196; Thu, 24 Dec 2015 13:54:42 +0000 (UTC) (envelope-from junovitch@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id tBODsfV1075622; Thu, 24 Dec 2015 13:54:41 GMT (envelope-from junovitch@FreeBSD.org) Received: (from junovitch@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id tBODsfqL075620; Thu, 24 Dec 2015 13:54:41 GMT (envelope-from junovitch@FreeBSD.org) Message-Id: <201512241354.tBODsfqL075620@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: junovitch set sender to junovitch@FreeBSD.org using -f From: Jason Unovitch Date: Thu, 24 Dec 2015 13:54:41 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r404359 - head/security/vuxml X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Dec 2015 13:54:43 -0000 Author: junovitch Date: Thu Dec 24 13:54:41 2015 New Revision: 404359 URL: https://svnweb.freebsd.org/changeset/ports/404359 Log: Document recent MediaWiki vulnerabilities Security: CVE-2015-8628 Security: CVE-2015-8627 Security: CVE-2015-8626 Security: CVE-2015-8625 Security: CVE-2015-8624 Security: CVE-2015-8623 Security: CVE-2015-8622 Security: https://vuxml.FreeBSD.org/freebsd/f36bbd66-aa44-11e5-8f5c-002590263bf5.html Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Thu Dec 24 13:31:53 2015 (r404358) +++ head/security/vuxml/vuln.xml Thu Dec 24 13:54:41 2015 (r404359) @@ -58,6 +58,72 @@ Notes: --> + + mediawiki -- multiple vulnerabilities + + + mediawiki123 + 1.23.12 + + + mediawiki124 + 1.24.5 + + + mediawiki125 + 1.25.4 + + + mediawiki126 + 1.26.1 + + + + +

MediaWiki reports:

+
(T117899) SECURITY: $wgArticlePath can no longer be set to relative + paths that do not begin with a slash. This enabled trivial XSS + attacks. Configuration values such as "http://my.wiki.com/wiki/$1" + are fine, as are "/wiki/$1". A value such as "$1" or "wiki/$1" is + not and will now throw an error.
+
(T119309) SECURITY: Use hash_compare() for edit token comparison. +
+
(T118032) SECURITY: Don't allow cURL to interpret POST parameters + starting with '@' as file uploads.
+
(T115522) SECURITY: Passwords generated by User::randomPassword() + can no longer be shorter than $wgMinimalPasswordLength.
+
(T97897) SECURITY: Improve IP parsing and trimming. Previous + behavior could result in improper blocks being issued.
+
(T109724) SECURITY: Special:MyPage, Special:MyTalk, + Special:MyContributions and related pages no longer use HTTP + redirects and are now redirected by MediaWiki.
+

+ + + + CVE-2015-8622 + CVE-2015-8623 + CVE-2015-8624 + CVE-2015-8625 + CVE-2015-8626 + CVE-2015-8627 + CVE-2015-8628 + https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html + https://phabricator.wikimedia.org/T117899 + https://phabricator.wikimedia.org/T119309 + https://phabricator.wikimedia.org/T118032 + https://phabricator.wikimedia.org/T115522 + https://phabricator.wikimedia.org/T97897 + https://phabricator.wikimedia.org/T109724 + http://www.openwall.com/lists/oss-security/2015/12/23/7 + + + 2015-12-18 + 2015-12-24 + + + Ruby -- unsafe tainted string vulnerability