[Git][security-tracker-team/security-tracker][master] add more mediawiki issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b262fe96 by Moritz Mühlenhoff at 2026-04-03T12:35:38+02:00
add more mediawiki issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85,11 +85,23 @@ CVE-2023-7343 (HiSecOS web server versions 05.0.00 to 08.3.01 prior to 08.3.02 c
 	TODO: check
 CVE-2022-4986 (Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial ...)
 	TODO: check
-CVE-2026-34090
+CVE-2026-34086
 	- mediawiki 1:1.43.8+dfsg-1
-	[trixie] - mediawiki <not-affected> (Vulnerable code not present)
-	[bookworm] - mediawiki <not-affected> (Vulnerable code not present)
-	[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
+	NOTE: http://phabricator.wikimedia.org/T415584
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265634 (REL1_43)
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265611 (master)
+CVE-2026-34093
+	- mediawiki 1:1.43.8+dfsg-1
+	NOTE: https://phabricator.wikimedia.org/T414547
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265667 (REL1_43)
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265639 (master)
+CVE-2026-34087
+	- mediawiki 1:1.43.8+dfsg-1
+	NOTE: https://phabricator.wikimedia.org/T412061
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OATHAuth/+/1265614 (REL1_43)
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/OATHAuth/+/1265610 (master)
+CVE-2026-34090
+	- mediawiki <not-affected> (Vulnerable code not present, introduced past 1.43)
 	NOTE: https://phabricator.wikimedia.org/T411366
 	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/1240641 (master)
 CVE-2026-34091



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b262fe9632e5e8405126d9cb351f93de6de76468

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b262fe9632e5e8405126d9cb351f93de6de76468
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260403/71b457f0/attachment.htm>