Fedora 26 : mediawiki (2017-d3aedd5dc7)

Due to a mistake in packaging, the releases 1.27.2 and 1.28.1 did not contain the fix for SyntaxHighlightGeSHi. This new release does contain that fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 25 : mediawiki (2017-2643ef1cad)

Due to a mistake in packaging, the releases 1.27.2 and 1.28.1 did not contain the fix for SyntaxHighlightGeSHi. This new release does contain that fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Code injection

GeSHi, as used in the SyntaxHighlightGeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

CVE-2015-6734

CVE-2015-6734 is a cross-site scripting vulnerability in contrib/cssgen.php of GeSHi used by MediaWiki. Affected are MediaWiki versions: <1.23.10, 1.24.x <1.24.3, and 1.25.x