[Git][security-tracker-team/security-tracker][master] auto-nfu: Extend wikimedia rule

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
08354565 by Moritz Muehlenhoff at 2026-10-01T17:17:41+02:00
auto-nfu: Extend wikimedia rule

- - - - -


2 changed files:

- data/CVE/list
- data/packages/nfu.yaml


Changes:

=====================================
data/CVE/list
=====================================
@@ -147,9 +147,9 @@ CVE-2026-103588 (QloApps through 1.7.0 contains a reflected cross-site scripting
 CVE-2026-103587 (QloApps through 1.7.0 contains a reflected cross-site scripting vulner ...)
 	NOT-FOR-US: QloApps
 CVE-2026-103585 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extensions/skins not packaged in Debian
 CVE-2026-103584 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
-	TODO: check
+	NOT-FOR-US: MediaWiki extensions/skins not packaged in Debian
 CVE-2026-103548 (Improperly stored passwords in the config file in Itron MV-90 xi 3.0 a ...)
 	NOT-FOR-US: Palo Alto Networks
 CVE-2026-103547 (In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, d ...)


=====================================
data/packages/nfu.yaml
=====================================
@@ -973,6 +973,7 @@
       - product: '.*CheckUser.*'
       - product: '.*CirrusSearch.*'
       - product: '.*Collection.*'
+      - product: '.*CommonsMetadata.*'
       - product: '.*CookieConsent.*'
       - product: '.*DataTransfer.*'
       - product: '.*EasyTimeline.*'
@@ -988,6 +989,7 @@
       - product: '.*LastModified.*'
       - product: '.*Lockdown.*'
       - product: '.*MassMessage.*'
+      - product: '.*MediaSearch.*'
       - product: '.*Monaco.*'
       - product: '.*OAuth.*'
       - product: '.*PageForms.*'



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0835456563b099977196117ecdfa4ec7622279cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0835456563b099977196117ecdfa4ec7622279cd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/f9e940d7/attachment-0001.htm>