Public bug reported: The versions of MediaWiki in supported Ubuntu releases are vulnerable to CVE-2021-44857, CVE-2021-44858, and CVE-2021-45038.
See <https://www.mediawiki.org/wiki/2021-12_security_release/FAQ> for more details. I will upload some debdiffs with patches shortly. ** Affects: mediawiki (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1955352 Title: Vulnerable to information disclosure through various actions To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mediawiki/+bug/1955352/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs