Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e3a28fed by Salvatore Bonaccorso at 2022-04-01T20:44:55+02:00
Four mediawiki issues fixed in unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -403,20 +403,20 @@ CVE-2022-28205 (An issue was discovered in MediaWiki
through 1.37.1. The Central
NOT-FOR-US: MediaWiki CentralAuth extension
CVE-2022-28204 [mediawiki: Special:WhatLinksHere can result in a DoS when a
page is used on a extremely large number of other pages]
RESERVED
- - mediawiki <unfixed>
+ - mediawiki 1:1.35.6-1
[bullseye] - mediawiki <postponed> (Fix along in next security release)
[buster] - mediawiki <postponed> (Fix along in next security release)
NOTE: https://phabricator.wikimedia.org/T297754
NOTE:
https://lists.wikimedia.org/hyperkitty/list/[email protected]/thread/YJNXKPV5Z56NSUQ4G3SXPDUIZG5EQ7UR/
CVE-2022-28203 [mediawiki: Requesting Special:NewFiles on a wiki with many
file uploads with actor as a condition can result in a DoS]
RESERVED
- - mediawiki <unfixed>
+ - mediawiki 1:1.35.6-1
[bullseye] - mediawiki <postponed> (Fix along in next security release)
[buster] - mediawiki <postponed> (Fix along in next security release)
NOTE: https://phabricator.wikimedia.org/T297731
NOTE:
https://lists.wikimedia.org/hyperkitty/list/[email protected]/thread/YJNXKPV5Z56NSUQ4G3SXPDUIZG5EQ7UR/
CVE-2022-28202 (An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x
before ...)
- - mediawiki <unfixed>
+ - mediawiki 1:1.35.6-1
[bullseye] - mediawiki <postponed> (Fix along in next security release)
[buster] - mediawiki <postponed> (Fix along in next security release)
[stretch] - mediawiki <postponed> (Fix along in next security release)
@@ -424,7 +424,7 @@ CVE-2022-28202 (An XSS issue was discovered in MediaWiki
before 1.35.6, 1.36.x b
NOTE:
https://lists.wikimedia.org/hyperkitty/list/[email protected]/thread/YJNXKPV5Z56NSUQ4G3SXPDUIZG5EQ7UR/
CVE-2022-28201 [mediawiki: Title::newMainPage() goes into an infinite
recursion loop if it points to a local interwiki]
RESERVED
- - mediawiki <unfixed>
+ - mediawiki 1:1.35.6-1
[bullseye] - mediawiki <postponed> (Fix along in next security release)
[buster] - mediawiki <postponed> (Fix along in next security release)
NOTE: https://phabricator.wikimedia.org/T297571
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3a28fed7ab5febe21e5739dd94d7c1698dcf748
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3a28fed7ab5febe21e5739dd94d7c1698dcf748
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
