mediawiki - security update

Fixed packages 1

Vulnerabilities 4

• Low 2.1
  CVE-2025-32698

  LogPager.php: Restriction enforcer functions do not correctly enforce suppression restrictions

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.

  Wikimedia Foundation MediaWiki mediawiki mediawiki Web / CMS Debian Ubuntu
  Apr 10, 2025
• Low 2.1
  CVE-2025-32699

  Potential javascript injection attack enabled by Unicode normalization in Action API

  Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2.

  Wikimedia Foundation MediaWiki Parsoid mediawiki Web / CMS Debian Ubuntu
  Apr 10, 2025
• None 0.0
  CVE-2025-32696

  "reupload-own" restriction can be bypassed by reverting file

  Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, …

  Wikimedia Foundation MediaWiki mediawiki mediawiki Web / CMS Debian Ubuntu
  Apr 10, 2025
• None 0.0
  CVE-2025-3469

  i18n XSS vulnerability in HTMLMultiSelectField when sections are used

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php. This issue affe…

  Wikimedia Foundation MediaWiki mediawiki mediawiki Web / CMS Debian Ubuntu
  Apr 10, 2025