Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.
| Software | From | Fixed in |
|---|---|---|
| mediawiki / mediawiki | 1.27.0 | 1.27.2 |
| mediawiki / mediawiki | 1.28.0 | 1.28.1 |
| debian / debian_linux | 7.0 | 7.0.x |