[Git][security-tracker-team/security-tracker][master] mediawiki DSA

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6d7e017f by Moritz Mühlenhoff at 2023-10-10T21:19:39+02:00
mediawiki DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -126,11 +126,13 @@ CVE-2023-45362
 	NOTE: https://phabricator.wikimedia.org/T341529
 CVE-2023-45361
 	- mediawiki 1:1.39.5-1
+	[bookworm] - mediawiki 1:1.39.5-1~deb12u1
 	[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
 	[buster] - mediawiki <not-affected> (Vulnerable code not present)
 	NOTE: https://phabricator.wikimedia.org/T340220
 CVE-2023-45359
 	- mediawiki 1:1.39.5-1
+	[bookworm] - mediawiki 1:1.39.5-1~deb12u1
 	[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
 	[buster] - mediawiki <not-affected> (Vulnerable code not present)
 	NOTE: https://phabricator.wikimedia.org/T340217
@@ -261,6 +263,7 @@ CVE-2023-45367 (An issue was discovered in the CheckUser extension for MediaWiki
 	NOT-FOR-US: MediaWiki extension CheckUser
 CVE-2023-45364 (An issue was discovered in includes/page/Article.php in MediaWiki 1.36 ...)
 	- mediawiki 1:1.39.5-1
+	[bookworm] - mediawiki 1:1.39.5-1~deb12u1
 	[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
 	[buster] - mediawiki <not-affected> (Vulnerable code not present)
 	NOTE: https://phabricator.wikimedia.org/T264765


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[10 Oct 2023] DSA-5520-1 mediawiki - security update
+	{CVE-2023-3550 CVE-2023-45360 CVE-2023-45362 CVE-2023-45363}
+	[bullseye] - mediawiki 1:1.35.13-1~deb11u1
+	[bookworm] - mediawiki 1:1.39.5-1~deb12u1
 [06 Oct 2023] DSA-5519-1 grub2 - security update
 	{CVE-2023-4692 CVE-2023-4693}
 	[bullseye] - grub2 2.06-3~deb11u6


=====================================
data/dsa-needed.txt
=====================================
@@ -34,8 +34,6 @@ linux (carnil)
   Wait until more issues have piled up, though try to regulary rebase for point
   releases to more recent v5.10.y and 6.1.y versions
 --
-mediawiki (jmm)
---
 nbconvert/oldstable
   Guilhem Moulin proposed an update ready for review
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d7e017f54d9af7375a58f726d0a1b843edee220

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d7e017f54d9af7375a58f726d0a1b843edee220
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231010/42af994b/attachment.htm>