Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6d7e017f by Moritz Mühlenhoff at 2023-10-10T21:19:39+02:00
mediawiki DSA
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -126,11 +126,13 @@ CVE-2023-45362
NOTE: https://phabricator.wikimedia.org/T341529
CVE-2023-45361
- mediawiki 1:1.39.5-1
+ [bookworm] - mediawiki 1:1.39.5-1~deb12u1
[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
[buster] - mediawiki <not-affected> (Vulnerable code not present)
NOTE: https://phabricator.wikimedia.org/T340220
CVE-2023-45359
- mediawiki 1:1.39.5-1
+ [bookworm] - mediawiki 1:1.39.5-1~deb12u1
[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
[buster] - mediawiki <not-affected> (Vulnerable code not present)
NOTE: https://phabricator.wikimedia.org/T340217
@@ -261,6 +263,7 @@ CVE-2023-45367 (An issue was discovered in the CheckUser
extension for MediaWiki
NOT-FOR-US: MediaWiki extension CheckUser
CVE-2023-45364 (An issue was discovered in includes/page/Article.php in
MediaWiki 1.36 ...)
- mediawiki 1:1.39.5-1
+ [bookworm] - mediawiki 1:1.39.5-1~deb12u1
[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
[buster] - mediawiki <not-affected> (Vulnerable code not present)
NOTE: https://phabricator.wikimedia.org/T264765
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[10 Oct 2023] DSA-5520-1 mediawiki - security update
+ {CVE-2023-3550 CVE-2023-45360 CVE-2023-45362 CVE-2023-45363}
+ [bullseye] - mediawiki 1:1.35.13-1~deb11u1
+ [bookworm] - mediawiki 1:1.39.5-1~deb12u1
[06 Oct 2023] DSA-5519-1 grub2 - security update
{CVE-2023-4692 CVE-2023-4693}
[bullseye] - grub2 2.06-3~deb11u6
=====================================
data/dsa-needed.txt
=====================================
@@ -34,8 +34,6 @@ linux (carnil)
Wait until more issues have piled up, though try to regulary rebase for point
releases to more recent v5.10.y and 6.1.y versions
--
-mediawiki (jmm)
---
nbconvert/oldstable
Guilhem Moulin proposed an update ready for review
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d7e017f54d9af7375a58f726d0a1b843edee220
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d7e017f54d9af7375a58f726d0a1b843edee220
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
