Ubuntu Update for Linux kernel vulnerabilities USN-1604-1

Please Install the Updated Packages.

It was discovered that MoinMoin did not properly sanitize certain input, resulting in a cross-site scripting (XSS) vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. (CVE-2011-1058) It was discovered that MoinMoin incorrectly handled group names that contain virtual group names such as &quot All&quot , &quot Known&quot or &quot Trusted&quot . This could result in a remote user having incorrect permissions. (CVE-2012-4404)

moin on Ubuntu 12.04 LTS , Ubuntu 11.10 , Ubuntu 11.04 , Ubuntu 10.04 LTS

• https://lists.ubuntu.com/archives/ubuntu-security-announce/2012-October/001863.html

---

Updated on 2015-03-25