October 2024 - MediaWiki-Debian - lists.wikimedia.org

mediawiki-extension-youtube is marked for autoremoval from testing
by Debian testing autoremoval watch 28 Oct '24

28 Oct '24

mediawiki-extension-youtube 1.9.3~git20221020.e005c0b-1 is marked for autoremoval from testing on 2024-12-02 It (build-)depends on packages with these RC bugs: 1085453: mediawiki: embedded copy of dompurify, affected by CVE-2024-47875 https://bugs.debian.org/1085453 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/ma… Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gath…

1 0

mediawiki-skin-greystuff is marked for autoremoval from testing
by Debian testing autoremoval watch 28 Oct '24

28 Oct '24

mediawiki-skin-greystuff 1.2.5~git20220922.60bda8c-2 is marked for autoremoval from testing on 2024-12-02 It (build-)depends on packages with these RC bugs: 1085453: mediawiki: embedded copy of dompurify, affected by CVE-2024-47875 https://bugs.debian.org/1085453 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/ma… Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gath…

1 0

mediawiki is marked for autoremoval from testing
by Debian testing autoremoval watch 28 Oct '24

28 Oct '24

mediawiki 1:1.39.10-1 is marked for autoremoval from testing on 2024-12-02 It is affected by these RC bugs: 1085453: mediawiki: embedded copy of dompurify, affected by CVE-2024-47875 https://bugs.debian.org/1085453 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/ma… Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gath…

1 0

mediawiki-extension-codemirror is marked for autoremoval from testing
by Debian testing autoremoval watch 28 Oct '24

28 Oct '24

mediawiki-extension-codemirror 4.0.0~git20221204.b897975-1 is marked for autoremoval from testing on 2024-12-02 It (build-)depends on packages with these RC bugs: 1085453: mediawiki: embedded copy of dompurify, affected by CVE-2024-47875 https://bugs.debian.org/1085453 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/ma… Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gath…

1 0

Bug#1085453: dompurify
by Bastien Roucariès 23 Oct '24

23 Oct '24

Source: mediawiki Severity: serious Tags: upstream security Dear Maintainer, Dompurify was affected recently by a few security bug Can you cross check that you patched the problem https://sources.debian.org/src/mediawiki/1:1.39.10-1/extensions/VisualEdito… Better will be to use last debian version moreover could you document in the security tracker that you embed for old version dompurify ? Bastien

2 1

Processed: tagging 1077429, tagging 1056978, tagging 1077195, reassign 1077793 to src:haskell-pandoc ...
by Debian Bug Tracking System 19 Oct '24

19 Oct '24

Processing commands for control(a)bugs.debian.org: > tags 1077429 + experimental Bug #1077429 [src:yad] yad: FTBFS: main.c:673:73: error: passing argument 2 of ‘gtk_style_context_add_provider’ from incompatible pointer type [-Wincompatible-pointer-types] Added tag(s) experimental. > tags 1056978 + sid trixie Bug #1056978 {Done: Michael Meskes <meskes(a)debian.org>} [hostname] hostname: Installs files into /bin Added tag(s) trixie and sid. > tags 1077195 + experimental Bug #1077195 {Done: Timo Röhling <roehling(a)debian.org>} [python3-numpy] python3-numpy: please update to 2.0.x Added tag(s) experimental. > reassign 1077793 src:haskell-pandoc Bug #1077793 {Done: Scott Talbert <swt(a)techie.net>} [pandoc] pandoc: Pandoc trying to use python2 for filter Bug reassigned from package 'pandoc' to 'src:haskell-pandoc'. No longer marked as found in versions pandoc/3.1.3+ds-3. No longer marked as fixed in versions haskell-pandoc/3.1.3-3. > fixed 1077793 3.1.3-3 Bug #1077793 {Done: Scott Talbert <swt(a)techie.net>} [src:haskell-pandoc] pandoc: Pandoc trying to use python2 for filter Marked as fixed in versions haskell-pandoc/3.1.3-3. > affects 1077793 + src:pandoc Bug #1077793 {Done: Scott Talbert <swt(a)techie.net>} [src:haskell-pandoc] pandoc: Pandoc trying to use python2 for filter Added indication that 1077793 affects src:pandoc > tags 1085463 + sid trixie Bug #1085463 [src:uwsgi-plugin-mongo] uwsgi-plugin-mongo: Depends on legacy mongodb driver which should go away Added tag(s) trixie and sid. > notfound 1085455 form-history-control/dompurify Bug #1085455 [src:form-history-control] form-history-control: dompurify The source form-history-control and version dompurify do not appear to match any binary packages No longer marked as found in versions form-history-control/dompurify. > retitle 1085455 form-history-control: embedded copy of dompurify, affected by CVE-2024-47875 Bug #1085455 [src:form-history-control] form-history-control: dompurify Changed Bug title to 'form-history-control: embedded copy of dompurify, affected by CVE-2024-47875' from 'form-history-control: dompurify'. > retitle 1085453 mediawiki: embedded copy of dompurify, affected by CVE-2024-47875 Bug #1085453 [src:mediawiki] dompurify Changed Bug title to 'mediawiki: embedded copy of dompurify, affected by CVE-2024-47875' from 'dompurify'. > tags 1085428 + sid trixie Bug #1085428 [src:only] Removal notice: obsolete Added tag(s) sid and trixie. > thanks Stopping processing here. Please contact me if you need assistance. -- 1056978: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056978 1077195: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077195 1077429: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077429 1077793: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077793 1085428: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085428 1085453: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085453 1085455: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085455 1085463: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085463 Debian Bug Tracking System Contact owner(a)bugs.debian.org with problems

1 0

mediawiki_1.39.10-1~deb12u1_source.changes ACCEPTED into proposed-updates
by Debian FTP Masters 06 Oct '24

06 Oct '24

Thank you for your contribution to Debian. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Oct 2024 17:44:10 +0300 Source: mediawiki Architecture: source Version: 1:1.39.10-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Taavi Väänänen <taavi(a)debian.org> Changes: mediawiki (1:1.39.10-1~deb12u1) bookworm-security; urgency=medium . * New upstream version 1.39.10, fixing T372998 (AbuseFilter API not properly checking permissions, CVE pending). Checksums-Sha1: ace61a43878dbd075578dd8fa80c47ad5ef027df 2569 mediawiki_1.39.10-1~deb12u1.dsc 6d563e4dd0fc335246268eea643b64ef395a458f 59269713 mediawiki_1.39.10.orig.tar.gz 57ced29ffc651e47020c1f2c20a4ac8aca7abe3d 195 mediawiki_1.39.10.orig.tar.gz.asc 2e2f3109fda9c61021557abd0271a33f74bcb906 102980 mediawiki_1.39.10-1~deb12u1.debian.tar.xz 2c1ab8e7e24067f6179dcba5abe5e985dfac8f18 7619 mediawiki_1.39.10-1~deb12u1_amd64.buildinfo Checksums-Sha256: f5fb1291771c4dba7907b55119caeb3619ed42f829157231708db5dd9edada86 2569 mediawiki_1.39.10-1~deb12u1.dsc 98bf0e6a42ebcc4b165c3853a17368e655619aacfda8c6121ffead5940ee1e13 59269713 mediawiki_1.39.10.orig.tar.gz 58e23a7e21ce632eab58e4c385e17c4f52a610104479c9cc74da9965f234d941 195 mediawiki_1.39.10.orig.tar.gz.asc d7f6cab4cf5ec953e1fbb8a06d5cd8b028f14ab3ddf6326e6f69b45b6a71a41f 102980 mediawiki_1.39.10-1~deb12u1.debian.tar.xz 217124095b7e49c6506e249ebdaeec836944bd577c70802c46ecc271ae124842 7619 mediawiki_1.39.10-1~deb12u1_amd64.buildinfo Files: 5ae8aac85bacbc6b860e0db222bec7ba 2569 web optional mediawiki_1.39.10-1~deb12u1.dsc 612f35551d31f0e5d2a561cb48ac8904 59269713 web optional mediawiki_1.39.10.orig.tar.gz 13ad7c3560b0775bbe871059164d9690 195 web optional mediawiki_1.39.10.orig.tar.gz.asc 0666b7dcdf79b03c9b2b60e3dda49161 102980 web optional mediawiki_1.39.10-1~deb12u1.debian.tar.xz 72baf2a1867c87e0ef38811d38b3358c 7619 web optional mediawiki_1.39.10-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmb9ZpoRHHRhYXZpQGRl Ymlhbi5vcmcACgkQ7yQvcJ+RL75yXA/7BdzZhXw8lQZgszyq2tShLoxyLiT5qVec AXDJ3b6tx9ayKylAQkDhQH0HQLmwIm16Qo70efCduDD181YQ3hBDTofxyW4ZQfc7 jAp79JTSVTw4BUJ5lUuuLl/l7sub+4NUhxK3/ebMCzOaFp6R+VKm3n1G+PH37K27 nakj2OaOOMaohVmLtR1F7j7T0dyeox0s4zjGJQ3OnnT/Y093upgh1O7sCUzyVE3B UkadeQtBfLfhydq/0dNcltIw/AQHppDhqEnchtM/L0X2O+YpSp6rdWDxKecactuC WanaPBm4lI8vB14mb9519KlXSh8hS6rRCjdrvI31YHa9tj548EinuGGDXkmDUw58 qY4R2G5w9PzymQmYD80Tb7hbXXW80DTBsMMjlQUeFe+dXrmtwSLqaLqhBL2jnvUD DeoKOzW53U6nS226UHal0Mma1dZgDdqKCtqJKfH+fgnGpIwF9Mx16HuzRkCB+0Sg euPJJgg/m/s00fVUf+t9eTzoIX/ht9scCTjN0e2LMcc3WQrJXHgQbb6MSNXMtDZu RQ4vGkTRA0+RCoaKWDsBYl5r/DHn9xkX7gL979MEiuPamYrTanGg8tNdVNwL/E8L HErNT95BglFjaGS7gpTxcawZcnbyeu50cZB9E2Vb/6rezXmGYMeAy0E2wNBW3UVK YkD7XSJ5PdM= =8CmI -----END PGP SIGNATURE-----

1 0

mediawiki_1.39.10-1~deb12u1_source.changes ACCEPTED into proposed-updates->stable-new
by Debian FTP Masters 05 Oct '24

05 Oct '24

Thank you for your contribution to Debian. Mapping stable-security to proposed-updates. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Oct 2024 17:44:10 +0300 Source: mediawiki Architecture: source Version: 1:1.39.10-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Taavi Väänänen <taavi(a)debian.org> Changes: mediawiki (1:1.39.10-1~deb12u1) bookworm-security; urgency=medium . * New upstream version 1.39.10, fixing T372998 (AbuseFilter API not properly checking permissions, CVE pending). Checksums-Sha1: ace61a43878dbd075578dd8fa80c47ad5ef027df 2569 mediawiki_1.39.10-1~deb12u1.dsc 6d563e4dd0fc335246268eea643b64ef395a458f 59269713 mediawiki_1.39.10.orig.tar.gz 57ced29ffc651e47020c1f2c20a4ac8aca7abe3d 195 mediawiki_1.39.10.orig.tar.gz.asc 2e2f3109fda9c61021557abd0271a33f74bcb906 102980 mediawiki_1.39.10-1~deb12u1.debian.tar.xz 2c1ab8e7e24067f6179dcba5abe5e985dfac8f18 7619 mediawiki_1.39.10-1~deb12u1_amd64.buildinfo Checksums-Sha256: f5fb1291771c4dba7907b55119caeb3619ed42f829157231708db5dd9edada86 2569 mediawiki_1.39.10-1~deb12u1.dsc 98bf0e6a42ebcc4b165c3853a17368e655619aacfda8c6121ffead5940ee1e13 59269713 mediawiki_1.39.10.orig.tar.gz 58e23a7e21ce632eab58e4c385e17c4f52a610104479c9cc74da9965f234d941 195 mediawiki_1.39.10.orig.tar.gz.asc d7f6cab4cf5ec953e1fbb8a06d5cd8b028f14ab3ddf6326e6f69b45b6a71a41f 102980 mediawiki_1.39.10-1~deb12u1.debian.tar.xz 217124095b7e49c6506e249ebdaeec836944bd577c70802c46ecc271ae124842 7619 mediawiki_1.39.10-1~deb12u1_amd64.buildinfo Files: 5ae8aac85bacbc6b860e0db222bec7ba 2569 web optional mediawiki_1.39.10-1~deb12u1.dsc 612f35551d31f0e5d2a561cb48ac8904 59269713 web optional mediawiki_1.39.10.orig.tar.gz 13ad7c3560b0775bbe871059164d9690 195 web optional mediawiki_1.39.10.orig.tar.gz.asc 0666b7dcdf79b03c9b2b60e3dda49161 102980 web optional mediawiki_1.39.10-1~deb12u1.debian.tar.xz 72baf2a1867c87e0ef38811d38b3358c 7619 web optional mediawiki_1.39.10-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmb9ZpoRHHRhYXZpQGRl Ymlhbi5vcmcACgkQ7yQvcJ+RL75yXA/7BdzZhXw8lQZgszyq2tShLoxyLiT5qVec AXDJ3b6tx9ayKylAQkDhQH0HQLmwIm16Qo70efCduDD181YQ3hBDTofxyW4ZQfc7 jAp79JTSVTw4BUJ5lUuuLl/l7sub+4NUhxK3/ebMCzOaFp6R+VKm3n1G+PH37K27 nakj2OaOOMaohVmLtR1F7j7T0dyeox0s4zjGJQ3OnnT/Y093upgh1O7sCUzyVE3B UkadeQtBfLfhydq/0dNcltIw/AQHppDhqEnchtM/L0X2O+YpSp6rdWDxKecactuC WanaPBm4lI8vB14mb9519KlXSh8hS6rRCjdrvI31YHa9tj548EinuGGDXkmDUw58 qY4R2G5w9PzymQmYD80Tb7hbXXW80DTBsMMjlQUeFe+dXrmtwSLqaLqhBL2jnvUD DeoKOzW53U6nS226UHal0Mma1dZgDdqKCtqJKfH+fgnGpIwF9Mx16HuzRkCB+0Sg euPJJgg/m/s00fVUf+t9eTzoIX/ht9scCTjN0e2LMcc3WQrJXHgQbb6MSNXMtDZu RQ4vGkTRA0+RCoaKWDsBYl5r/DHn9xkX7gL979MEiuPamYrTanGg8tNdVNwL/E8L HErNT95BglFjaGS7gpTxcawZcnbyeu50cZB9E2Vb/6rezXmGYMeAy0E2wNBW3UVK YkD7XSJ5PdM= =8CmI -----END PGP SIGNATURE-----

1 0

mediawiki 1:1.39.10-1 MIGRATED to testing
by Debian testing watch 04 Oct '24

04 Oct '24

FYI: The status of the mediawiki source package in Debian's testing distribution has changed. Previous version: 1:1.39.8-1 Current version: 1:1.39.10-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information.

1 0

mediawiki_1.39.10-1_source.changes ACCEPTED into unstable
by Debian FTP Masters 01 Oct '24

01 Oct '24

Thank you for your contribution to Debian. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 Oct 2024 18:45:38 +0300 Source: mediawiki Architecture: source Version: 1:1.39.10-1 Distribution: unstable Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Taavi Väänänen <taavi(a)debian.org> Changes: mediawiki (1:1.39.10-1) unstable; urgency=medium . * New upstream version 1.39.10 Checksums-Sha1: f8da6624a2852bf61d5a49ca130b83e6a301ce3f 2541 mediawiki_1.39.10-1.dsc 6d563e4dd0fc335246268eea643b64ef395a458f 59269713 mediawiki_1.39.10.orig.tar.gz 57ced29ffc651e47020c1f2c20a4ac8aca7abe3d 195 mediawiki_1.39.10.orig.tar.gz.asc b3b46926f1e837cbc098f19031b8dacccada8386 103072 mediawiki_1.39.10-1.debian.tar.xz 86f7eb0635e74561c7e1b7bc56b99bbfe44cf6b5 7660 mediawiki_1.39.10-1_amd64.buildinfo Checksums-Sha256: 17f25a80ba971342bbcdda78029ebf0c643a7b952eec7cce9e42f341619578d6 2541 mediawiki_1.39.10-1.dsc 98bf0e6a42ebcc4b165c3853a17368e655619aacfda8c6121ffead5940ee1e13 59269713 mediawiki_1.39.10.orig.tar.gz 58e23a7e21ce632eab58e4c385e17c4f52a610104479c9cc74da9965f234d941 195 mediawiki_1.39.10.orig.tar.gz.asc 089c60c076de378a172cfa3b3d41efb339369e02f9b6f55b18e465dee380f972 103072 mediawiki_1.39.10-1.debian.tar.xz 53fae7fa151793327042acd537aebe34447bf480a28cf08b495833ec3fdb2274 7660 mediawiki_1.39.10-1_amd64.buildinfo Files: d1355ead23093b79703dcd5447e04a91 2541 web optional mediawiki_1.39.10-1.dsc 612f35551d31f0e5d2a561cb48ac8904 59269713 web optional mediawiki_1.39.10.orig.tar.gz 13ad7c3560b0775bbe871059164d9690 195 web optional mediawiki_1.39.10.orig.tar.gz.asc 58461b85dc2e32e8d9189060707669ad 103072 web optional mediawiki_1.39.10-1.debian.tar.xz 1cd5cdb5df408bf097b2d4e73f68ce37 7660 web optional mediawiki_1.39.10-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmb8MRYRHHRhYXZpQGRl Ymlhbi5vcmcACgkQ7yQvcJ+RL77SBRAAy7D/oz6NuyX8f48yeAp4abhSt6B/Rayd Ggl5tY29sNQDVHG07zhp7XZavi625NB7ALJbkpqG5/tIbr1uOcBOgrMXaCfg8tzn /LR91zJbPoObqmcoDIHmOPOpwSfjlnjDToX0ljBoUQOknsxUDahg8UsfTHhJMkjE FY4J4YvwXK41lYH6IvTTachtt/Q72bPkaoGBmy/C0FECp056kbMAlYKPLqYIuRTX PksTaNwBVuGKvkMRMAUs/aFmQNheYCnXfY0ejVAeYTf+aP2rqVzIyrGlGi2HHTHn 8X6kw399PuGgbEVENLEOJHWl4VypiU+LXirD826gzPZcCwnhYQ5cE5FByMjZTe0G 8jspyOTNpz7Q87nzS0nnQzr2czqSVkZOj3c7wBXCyGLS5YTn86QYElrOeMRHpXlQ /VsritborDQIabK8WRUgBFupJMgyZvHGXY+Ly+vsrHS0wvhP9FWxttiurtNppvSj fkHLxBvQ9skB05Ixr+9DqvCcdaOwYMEbIzPxK3QV7EYpFghV5urh6FDnocfpc5Ef tfw22HnZeezOFg9v3Rb4URLHxD9YQK5JVityecwjFfZ3s1so7l/lFVo9+dRQ4GLl OsooNY3l6DxB9Y02rJmOOhn9ALUZINOIvQsf7kBPEPJYVGV4iXXgMYHqfrlrFgD2 LLFQu09HoVA= =2+5I -----END PGP SIGNATURE-----

1 0

2025

2024

2023

2022

2021

2020

2019

2018

MediaWiki-Debian October 2024