Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
08354565 by Moritz Muehlenhoff at 2026-10-01T17:17:41+02:00
auto-nfu: Extend wikimedia rule
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -147,9 +147,9 @@ CVE-2026-103588 (QloApps through 1.7.0 contains a reflected
cross-site scripting
CVE-2026-103587 (QloApps through 1.7.0 contains a reflected cross-site
scripting vulner ...)
NOT-FOR-US: QloApps
CVE-2026-103585 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
- TODO: check
+ NOT-FOR-US: MediaWiki extensions/skins not packaged in Debian
CVE-2026-103584 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
- TODO: check
+ NOT-FOR-US: MediaWiki extensions/skins not packaged in Debian
CVE-2026-103548 (Improperly stored passwords in the config file in Itron MV-90
xi 3.0 a ...)
NOT-FOR-US: Palo Alto Networks
CVE-2026-103547 (In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before
errata 021, d ...)
=====================================
data/packages/nfu.yaml
=====================================
@@ -973,6 +973,7 @@
- product: '.*CheckUser.*'
- product: '.*CirrusSearch.*'
- product: '.*Collection.*'
+ - product: '.*CommonsMetadata.*'
- product: '.*CookieConsent.*'
- product: '.*DataTransfer.*'
- product: '.*EasyTimeline.*'
@@ -988,6 +989,7 @@
- product: '.*LastModified.*'
- product: '.*Lockdown.*'
- product: '.*MassMessage.*'
+ - product: '.*MediaSearch.*'
- product: '.*Monaco.*'
- product: '.*OAuth.*'
- product: '.*PageForms.*'
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0835456563b099977196117ecdfa4ec7622279cd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0835456563b099977196117ecdfa4ec7622279cd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
