Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerability roundup 98: mediawiki-1.35.0: 11 advisories [8.8] #109192

Closed
11 tasks done
ckauhaus opened this issue Jan 12, 2021 · 4 comments
Closed
11 tasks done

Vulnerability roundup 98: mediawiki-1.35.0: 11 advisories [8.8] #109192

ckauhaus opened this issue Jan 12, 2021 · 4 comments
Labels
1.severity: security

Comments

@ckauhaus
Copy link
Contributor

ckauhaus commented Jan 12, 2021 •
edited

search, files

Scanned versions: nixos-unstable: 257cbbc.

Cc @redvers
@ckauhaus
Copy link
Contributor Author

See also: #109192, #102805

@ckauhaus
Copy link
Contributor Author

Checked off CVEs affect plugins which must be separately installed.

@LeSuisse
Copy link
Contributor

Following CVEs should be fixed by #109584:

The vulnerable code paths for the remaining CVEs (CVE-2020-35625, CVE-2020-35626, CVE-2020-35623, CVE-2020-35622, CVE-2020-35624) are not present in the nixpkgs Mediawiki package.

@ckauhaus
Copy link
Contributor Author

I think it is ok to close this issue then.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
1.severity: security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@LeSuisse @ckauhaus