Red Hat Security Advisory: OpenShift Container Platform 3.9 mediawiki123 security update

Fixed packages 2

Vulnerabilities 3

• Medium 6.5
  CVE-2018-0504

  Information disclosure in Special:Redirect/logid

  Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid

  mediawiki mediawiki mediawiki mediawiki Web / CMS Debian Ubuntu Packagist
  Oct 4, 2018
• Medium 6.5
  CVE-2018-0505

  BotPasswords can bypass CentralAuth's account lock

  Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock

  mediawiki mediawiki mediawiki mediawiki Web / CMS Debian Ubuntu Packagist
  Oct 4, 2018
• Medium 4.3
  CVE-2018-0503

  $wgRateLimits entry for 'user' overrides 'newbie'

  Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.

  mediawiki mediawiki mediawiki mediawiki Web / CMS Debian Ubuntu Packagist
  Oct 4, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#low
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634161
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1634168
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3813.json
• report
  https://access.redhat.com/security/cve/CVE-2018-0503
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0503
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0503
• report
  https://access.redhat.com/security/cve/CVE-2018-0504
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0504
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0504
• report
  https://access.redhat.com/security/cve/CVE-2018-0505
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0505
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0505