[Git][security-tracker-team/security-tracker][master] Add CVE-2025-32072/mediawiki
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Apr 18 07:44:11 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3c2ce77e by Salvatore Bonaccorso at 2025-04-18T08:43:36+02:00
Add CVE-2025-32072/mediawiki
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2618,7 +2618,7 @@ CVE-2025-32074 (Improper Encoding or Escaping of Output vulnerability in The Wik
CVE-2025-32073 (Improper Input Validation vulnerability in The Wikimedia Foundation Me ...)
NOT-FOR-US: HTMLTags MediaWiki extension
CVE-2025-32072 (Improper Encoding or Escaping of Output vulnerability in The Wikimedia ...)
- - mediawiki <unfixed>
+ - mediawiki 1:1.43.1+dfsg-2
[bookworm] - mediawiki <postponed> (Fix along in next DSA)
NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1120134
NOTE: https://phabricator.wikimedia.org/T386175
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3c2ce77eb546fb52f469aad6248f8692e3cfb8c1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3c2ce77eb546fb52f469aad6248f8692e3cfb8c1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250418/008a4a01/attachment.htm>
More information about the debian-security-tracker-commits
mailing list