MGASA-2025-0260 Updated mediawiki packages fix security vulnerabilities

i18n XSS vulnerability in HTMLMultiSelectField when sections are used. CVE-2025-3469 "reupload-own" restriction can be bypassed by reverting file. CVE-2025-32696 Cascading protection is not preventing file reversions. CVE-2025-32697 LogPager.php: Restriction enforcer functions do not correctly...

CVE-2025-32697

CVE-2025-32697 affects MediaWiki before 1.42.6 and 1.43.x before 1.43.1. The vulnerability is an Improper Preservation of Permissions in core, relating to files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, and includes/Permissions/RestrictionStore.Php. Ro...

CVE-2025-32697 Cascading protection is not preventing file reversions

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki:...