Candidate: CVE-2015-6733 PublicDate: 2015-09-01 14:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6733 https://phabricator.wikimedia.org/T108198 http://www.openwall.com/lists/oss-security/2015/08/27 Description: GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. Ubuntu-Description: Notes: seth-arnold> upstream patch removes contributed scripts Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_mediawiki: upstream: https://phabricator.wikimedia.org/T108198 upstream_mediawiki: not-affected (code not present) precise_mediawiki: ignored (reached end-of-life) precise/esm_mediawiki: DNE (precise was needed) trusty_mediawiki: not-affected (code not present) trusty/esm_mediawiki: DNE (trusty was not-affected [code not present]) vivid_mediawiki: ignored (reached end-of-life) vivid/stable-phone-overlay_mediawiki: DNE vivid/ubuntu-core_mediawiki: DNE wily_mediawiki: ignored (reached end-of-life) xenial_mediawiki: DNE yakkety_mediawiki: ignored (reached end-of-life) zesty_mediawiki: ignored (reached end-of-life) artful_mediawiki: ignored (reached end-of-life) bionic_mediawiki: not-affected (code not present) devel_mediawiki: not-affected (code not present)