tocsin

Debian/mediawiki: unknown

MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metach

Action: Upgrade mediawiki to 1:1.19.11+dfsg-1 or later.

Affected

introducedfixedlast affected
01:1.19.11+dfsg-1-

Fixed versions

1:1.19.11+dfsg-1

Sources

published · modified · JSON