Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 5408036a by Moritz Muehlenhoff at 2025-10-02T23:08:26+02:00 more mediawiki issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,21 @@ +CVE-2025-61648 + NOT-FOR-US: MediaWiki extension CheckUser +CVE-2025-61658 + NOT-FOR-US: MediaWiki extension CheckUser +CVE-2025-61651 + NOT-FOR-US: MediaWiki extension CheckUser +CVE-2025-61646 [Prevent leaking hidden usernames in Watchlist/RecentChanges] + - mediawiki <unfixed> + NOTE: https://phabricator.wikimedia.org/T398706 + NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193226 +CVE-2025-61645 [Fix i18n XSS in CodexTablePager] + - mediawiki <not-affected> (Introduced in 1.44) + NOTE: http://phabricator.wikimedia.org/T403761 + NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193202 +CVE-2025-61643 [Don't send suppressed recent changes to RCFeeds] + - mediawiki <unfixed> + NOTE: https://phabricator.wikimedia.org/T403757 + NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193223 CVE-2025-61735 (Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Thi ...) NOT-FOR-US: Apache software not packaged in Debian CVE-2025-61734 (Files or Directories Accessible to External Parties vulnerability in A ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5408036ac42a634adff62bec7cc3284d0531926c -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5408036ac42a634adff62bec7cc3284d0531926c You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
