Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Nov 2020 10:14:47 -0800 (PST)
From:      Roger Marquis <marquis@roble.com>
To:        Kubilay Kocak <koobs@FreeBSD.org>
Cc:        freebsd-security@freebsd.org, python <python@FreeBSD.org>
Subject:   Re: Moinmoin
Message-ID:  <9979379s-7694-76no-692r-p51n5p51877@mx.roble.com>
In-Reply-To: <ddc77449-c646-064b-cbcc-dc1ece466413@FreeBSD.org>
References:  <8o206235-597-p266-o7s-oqn87s1np279@mx.roble.com> <ddc77449-c646-064b-cbcc-dc1ece466413@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Hey Kubilay,

Originally saw the vuln on a security RSS feeds, probably NIST's, but it
is also listed on the moinmo.in website:

   News

     2020-11-08 MoinMoin 1.9.11 released, including urgent security
     fixes! See: https://github.com/moinwiki/moin-1.9/releases/tag/1.9.11

Roger


> On 28/11/2020 12:55 pm, Roger Marquis wrote:
>> Anyone know if www/moinmoin is abandonware?  The maintainer is listed as
>> python@freebsd.org and the version in ports has had an unpatched
>> vulnerability for the last couple of weeks.
>> 
>
> Hi Roger,
>
> I don't believe so, but development is slow
>
> Can you point us to references for the vulnerability and/or any other 
> references (cve, anouncements, commits, issues, patches in other OS's, etc)
>
> ./koobs



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9979379s-7694-76no-692r-p51n5p51877>