[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-34092/mediawiki for bullseye

Guilhem Moulin (@guilhem) guilhem at debian.org
Thu Apr 30 13:13:11 BST 2026



Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker


Commits:
678cf51f by Guilhem Moulin at 2026-04-30T14:12:47+02:00
Triage CVE-2026-34092/mediawiki for bullseye

Change and unblock navigation URLs were introduced in 1.39 by
https://gerrit.wikimedia.org/r/c/mediawiki/core/+/809315

- - - - -
67474e65 by Guilhem Moulin at 2026-04-30T14:12:48+02:00
Triage CVE-2026-34086/mediawiki for bullseye

Following secteam triaging.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14240,6 +14240,7 @@ CVE-2026-34086
 	- mediawiki 1:1.43.8+dfsg-1
 	[trixie] - mediawiki 1:1.43.8+dfsg-1~deb13u1
 	[bookworm] - mediawiki <ignored> (Minor issue, too intrusive to backport)
+	[bullseye] - mediawiki <ignored> (Minor issue, too intrusive to backport)
 	NOTE: http://phabricator.wikimedia.org/T415584
 	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265634 (REL1_43)
 	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/1265611 (master)
@@ -14275,6 +14276,7 @@ CVE-2026-34091
 CVE-2026-34092
 	{DSA-6208-1}
 	- mediawiki 1:1.43.8+dfsg-1
+	[bullseye] - mediawiki <not-affected> (Introduced in 1.39)
 	NOTE: https://phabricator.wikimedia.org/T384147
 	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265652 (REL1_43)
 	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1265638 (master)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/50bd4476be5138634f48f0b2920afef040eba7be...67474e65e6cf6946ebd017b9c0cbe796e14a1dc8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/50bd4476be5138634f48f0b2920afef040eba7be...67474e65e6cf6946ebd017b9c0cbe796e14a1dc8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260430/856e34f0/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list