mediawiki - security update

Fixed packages 1

Vulnerabilities 6

• High 7.5
  CVE-2021-20270

  Infinite Loop in Pygments

  An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

  mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI
  Mar 23, 2021
• High 7.5
  CVE-2021-27291

  Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

  In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …

  mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI
  Mar 17, 2021
• Unscored —
  CVE-2021-30152

  An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki A…

  mediawiki mediawiki Debian Ubuntu
  Apr 9, 2021
• Unscored —
  CVE-2021-30155

  An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does no…

  mediawiki Debian
  Apr 9, 2021
• Unscored —
  CVE-2021-30158

  An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable t…

  mediawiki mediawiki Debian Ubuntu
  Apr 6, 2021
• Unscored —
  CVE-2021-30159

  An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended …

  mediawiki mediawiki Debian Ubuntu
  Apr 9, 2021