CVE-2025-61639: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-61639 is a security vulnerability affecting MediaWiki software. The vulnerability is related to the ManualLogEntry::getDeleted functionality in the getRecentChange method. This issue was initially published on October 7, 2025, and last updated on October 8, 2025. The vulnerability affects multiple versions of MediaWiki, including versions in Ubuntu distributions from 18.04 LTS to 25.10 (Ubuntu Security).

The vulnerability involves improper implementation of the ManualLogEntry::getDeleted method when used in conjunction with getRecentChange functionality. The issue has been assigned a medium priority by Ubuntu security teams, suggesting moderate severity (Ubuntu Security). The vulnerability affects multiple MediaWiki packages across different distributions, including Debian and Ubuntu systems (Debian Tracker).

The vulnerability affects multiple versions of MediaWiki software across various distributions, potentially impacting both Debian and Ubuntu systems. All current versions in the Debian testing suite are marked as vulnerable to this issue (Debian Testing).

Currently, the vulnerability is under evaluation across multiple Ubuntu releases, including 25.10 (questing), 25.04 (plucky), 24.04 LTS (noble), 22.04 LTS (jammy), 20.04 LTS (focal), and 18.04 LTS (bionic). No official fixes have been released yet (Ubuntu Security).