Vulnerability Bulletins

DSA-3036 mediawiki - security update

   
Affected software Debian
 
It was discovered that MediaWiki, a wiki engine, did not sufficientlyfilter CSS in uploaded SVG files, allowing for cross site scripting.

More info:

https://www.debian.org/security/2014/dsa-3036