[Git][security-tracker-team/security-tracker][master] more mediawiki issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5408036a by Moritz Muehlenhoff at 2025-10-02T23:08:26+02:00
more mediawiki issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,21 @@
+CVE-2025-61648
+	NOT-FOR-US: MediaWiki extension CheckUser
+CVE-2025-61658
+	NOT-FOR-US: MediaWiki extension CheckUser
+CVE-2025-61651
+	NOT-FOR-US: MediaWiki extension CheckUser
+CVE-2025-61646 [Prevent leaking hidden usernames in Watchlist/RecentChanges]
+	- mediawiki <unfixed>
+	NOTE: https://phabricator.wikimedia.org/T398706
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193226
+CVE-2025-61645 [Fix i18n XSS in CodexTablePager]
+	- mediawiki <not-affected> (Introduced in 1.44)
+	NOTE: http://phabricator.wikimedia.org/T403761
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193202
+CVE-2025-61643 [Don't send suppressed recent changes to RCFeeds]
+	- mediawiki <unfixed>
+	NOTE: https://phabricator.wikimedia.org/T403757
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193223
 CVE-2025-61735 (Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.  Thi ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2025-61734 (Files or Directories Accessible to External Parties vulnerability in A ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5408036ac42a634adff62bec7cc3284d0531926c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5408036ac42a634adff62bec7cc3284d0531926c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251002/b76e261e/attachment.htm>