March 2024 - MediaWiki-Debian - lists.wikimedia.org

mediawiki_1.39.7-1~deb12u1_source.changes ACCEPTED into proposed-updates->stable-new
by Debian FTP Masters 31 Mar '24

31 Mar '24

Thank you for your contribution to Debian. Mapping stable-security to proposed-updates. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 29 Mar 2024 13:51:27 +0200 Source: mediawiki Architecture: source Version: 1:1.39.7-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Taavi Väänänen <hi(a)taavi.wtf> Changes: mediawiki (1:1.39.7-1~deb12u1) bookworm-security; urgency=medium . * New upstream version 1.39.7, fixing CVE-2023-51704, T355538 (XSS in edit summary parser, CVE pending) and T357760 (DoS in Special:MovePage, CVE pending). Checksums-Sha1: aa884701b6e6b684a9d0213b73ab1a9b5cacc725 2563 mediawiki_1.39.7-1~deb12u1.dsc b10d62584b72b3a2a6525841fb99af4655c0d8a2 58551899 mediawiki_1.39.7.orig.tar.gz 6ab75b62b1aed3305693de49082a169e895ab652 195 mediawiki_1.39.7.orig.tar.gz.asc 0294f2479eae5e861c079809c320d8d1056ca32b 102956 mediawiki_1.39.7-1~deb12u1.debian.tar.xz 471418edcfde3fc5c2e5de90f0757725015d2200 7458 mediawiki_1.39.7-1~deb12u1_amd64.buildinfo Checksums-Sha256: aa052a5c58a51d7f7681f9dc68baca3f6c773f409b2fe2941730ab3d3bbc86c6 2563 mediawiki_1.39.7-1~deb12u1.dsc 2be8156817d5c569fd6257342a276f91d7e530d1c0dce1134b7bf2b09ecae569 58551899 mediawiki_1.39.7.orig.tar.gz 096f0918b82529f9c5718364752e607ef96c797dded8ce79af72b5c9792e595f 195 mediawiki_1.39.7.orig.tar.gz.asc b5a13e7c434993570e21efe10d545f61fee54d1131546f19becc147385b53c41 102956 mediawiki_1.39.7-1~deb12u1.debian.tar.xz 7ede204dc88d77056f5e7c78533af04460e4cbf7de442e089f4582b57686ade2 7458 mediawiki_1.39.7-1~deb12u1_amd64.buildinfo Files: 974aefabf2acafff74bfa582791e50f2 2563 web optional mediawiki_1.39.7-1~deb12u1.dsc 8b8dd2270a10dfc1c703014b8950def7 58551899 web optional mediawiki_1.39.7.orig.tar.gz 76f5120b0a9ffd9e239eba582cf35f35 195 web optional mediawiki_1.39.7.orig.tar.gz.asc 92fbfc362e9cf303c9a4aa70ccf3e27b 102956 web optional mediawiki_1.39.7-1~deb12u1.debian.tar.xz 3eb3253f51b5a909a7074b3a23cde8d2 7458 web optional mediawiki_1.39.7-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE2MtZ8F27ngU4xIGd8QX4EBsFJpsFAmYI260THGxlZ29rdG1A cmlzZXVwLm5ldAAKCRDxBfgQGwUmm9osEADCjiqeZPCAXnFSS8LFlcktYZGsdaew Llf2loOuosYHqC9R+WUcAUsr65RKhCWrQI/zd2mj3WXsLt2plJIDFZNKaATPkCzf IofFrE0fC6BUGehc4KLu01L9Wr1/ILNsQND1Lq6jrd6BY2xMaU/9Grhi0MtICP+B ltplVV5OsLmUy28r9f6dDlHld4nMueA5SdedRaJaeK8nE8WcS3el6S9mtuHYVFlg /9yYv0by4SEl/fqGBJO/Llh+si7LdBh8zo60zLtVDjAKYIM8Nqkk/jkDjudSyWGL 61W9zz0h399oZaS2rSH+xc7+FZ6hU+/1TssclPGrtG77U1JnOFqu10hVYEUPTRA+ mXwWeTV4kvj/J4gFtAo86qwaIAb+pn5qvdsZ1g+02wJfJGWl0P+TYnuK95ElUGfv KDRU/+s+4zDHppiN0hZPfJ3Z+i1hTb+XYoebVFWGM1Mo2FMDC3wrZLyZhqH//IFi 2CgNMQ+baOVE9bS+G2IuPVG7jtjeMm+mRvncojjaVjpRwO4nGNlL4/febtHxnrCu vOVVf1AN0pPIrQ23QwL6sMVbYtDGPcpY6GWOeQ8HKbxEKKZkEscU03oCVOOdCwtB HBMMoesX6mrOSxW4X6K7diyD6iCsOrcGxpQBXcGlENk6qYgaG3lqBvKBT+tLxSQ2 qL7+aCO/KU2ZMQ== =JMoA -----END PGP SIGNATURE-----

1 0

mediawiki_1.39.7-1_source.changes ACCEPTED into unstable
by Debian FTP Masters 29 Mar '24

29 Mar '24

Thank you for your contribution to Debian. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Mar 2024 13:30:00 +0200 Source: mediawiki Architecture: source Version: 1:1.39.7-1 Distribution: unstable Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Taavi Väänänen <hi(a)taavi.wtf> Closes: 1064797 Changes: mediawiki (1:1.39.7-1) unstable; urgency=medium . * New upstream version 1.39.7. (Closes: #1064797) * Drop obsolete Lintian override for package-supports-alternative-init-but-no-init.d-script. * Fix ordering in debian/changelog to fix the globbing-patterns-out-of-order lintian warning. Checksums-Sha1: d095f4bf86ebfd12c6e75150d7c5c97a739e9920 2523 mediawiki_1.39.7-1.dsc b10d62584b72b3a2a6525841fb99af4655c0d8a2 58551899 mediawiki_1.39.7.orig.tar.gz 6ab75b62b1aed3305693de49082a169e895ab652 195 mediawiki_1.39.7.orig.tar.gz.asc edc1d452fc00d2d4179ee59315646c2441657a5c 103008 mediawiki_1.39.7-1.debian.tar.xz 8470b62faf62572f77b08c9bed8eda2a504b2f40 7534 mediawiki_1.39.7-1_amd64.buildinfo Checksums-Sha256: 8df8c1170cbee2fc74bfb5176bec32f6cd06fea9fd0bd9350f7525a519185686 2523 mediawiki_1.39.7-1.dsc 2be8156817d5c569fd6257342a276f91d7e530d1c0dce1134b7bf2b09ecae569 58551899 mediawiki_1.39.7.orig.tar.gz 096f0918b82529f9c5718364752e607ef96c797dded8ce79af72b5c9792e595f 195 mediawiki_1.39.7.orig.tar.gz.asc f2f8b476873183fbd0684a9b4db5745bbd6fb034f4ad97e667eacab958650073 103008 mediawiki_1.39.7-1.debian.tar.xz 33f6fb1e1e4fbc756aba0ee81798f3fb4900b4669aa97536317c9acd7c76003b 7534 mediawiki_1.39.7-1_amd64.buildinfo Files: 0f716ef77e96fa3e14f4833765490676 2523 web optional mediawiki_1.39.7-1.dsc 8b8dd2270a10dfc1c703014b8950def7 58551899 web optional mediawiki_1.39.7.orig.tar.gz 76f5120b0a9ffd9e239eba582cf35f35 195 web optional mediawiki_1.39.7.orig.tar.gz.asc b352c7a4aa7d8c10b2bad0b4922c6087 103008 web optional mediawiki_1.39.7-1.debian.tar.xz 153ec7226f59f194c6d26ab58180d63c 7534 web optional mediawiki_1.39.7-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJBBAEBCgArFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmYGqlgNHGhpQHRhYXZp Lnd0ZgAKCRDvJC9wn5Evvi+rD/wNUCcTFHKgRO/VcSIzpxuU+BEDBGwij7B9+vpP XovW7punNkoYbwQ3QKR4K53cPQkixO4JYdKsAR+vo5YD1ghTxF9ut3rNdxO5VrlV 686kcutHTVbrpo6ry1YKpEiZuUL2/vBDu0baMtHHBjm4ujDSLIfEP6lTlN/U+k8/ orgaky72rjklIiHZW9bowfn5goIOHTJnihP5FuIBd/+XuIoZD13mqEUEVcqHvCaI IGrN3BnIRFl6/0ZC7x17cVAhQov/AX9PQweLwqyBGoaH2yROLSuysMSkF84NC+t5 vcwpqDDfPIT3lVd0EZyfkT5JFmkXbk4tWdGW/m1lT++765ypgUaWXwNCR/9KE4Le kaqTquSkSyGVOUeO1ryFeV065zHQ+e0iplw8zOlqknFlXv8VjC2lJ0HHLjzmxhHo vYXhYaCeY5KAHDnj5rFMx0Z2X1L7Ows2g0+oD1+UzDjWUoL77KFbEr7/FLscQ9cN 4115uOwyUw0I7IsH4j13dvOZjWL8a/Vi3rHBVrH45+nl/o6SNuoTp77ZTYSSqBj/ CSmYZ512BGdnZObh+8B5Ug0vgqTPK565QtGAsqk1lCpZfedYTWWpgaWlgWQFRUxG AAD+mpKC1qOVMkQpk9IkRRLvbd8rdmoEXmO7ivZXJ3btcUukm4sB2MPteUKjyztN NQAe2g== =4a3N -----END PGP SIGNATURE-----

1 0

Processing of mediawiki_1.39.7-1_source.changes
by Debian FTP Masters 29 Mar '24

29 Mar '24

mediawiki_1.39.7-1_source.changes uploaded successfully to localhost along with the files: mediawiki_1.39.7-1.dsc mediawiki_1.39.7.orig.tar.gz mediawiki_1.39.7.orig.tar.gz.asc mediawiki_1.39.7-1.debian.tar.xz mediawiki_1.39.7-1_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

1 0

php-excimer 1.2.1-1 MIGRATED to testing
by Debian testing watch 26 Mar '24

26 Mar '24

FYI: The status of the php-excimer source package in Debian's testing distribution has changed. Previous version: 1.1.1-2 Current version: 1.2.1-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information.

1 0

php-luasandbox 4.1.2-1 MIGRATED to testing
by Debian testing watch 26 Mar '24

26 Mar '24

FYI: The status of the php-luasandbox source package in Debian's testing distribution has changed. Previous version: 4.1.1-1 Current version: 4.1.2-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information.

1 0

Bug#1064797: Mediawiki ships with .htaccess files containing outdated access control configuration
by Alain Knaff 24 Mar '24

24 Mar '24

Package: mediawiki Version: 1:1.39.5-1~deb12u1 Hi, Mediawiki ships with .htaccess files which contain outdated access control directives. for instance, /usr/share/mediawiki/vendor/.htaccess contains: Deny from all rather than the more current Require all denied The new syntax was introduced in Apache 2.4, shipping since at least Jessie, April 2015. Wouldn't it be time to go with the new syntax, as less and less people now continue to use the access_compat module? Thanks, Alain

3 2

php-luasandbox_4.1.2-1_source.changes ACCEPTED into unstable
by Debian FTP Masters 24 Mar '24

24 Mar '24

Thank you for your contribution to Debian. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 23 Mar 2024 22:17:09 -0400 Source: php-luasandbox Architecture: source Version: 4.1.2-1 Distribution: unstable Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Kunal Mehta <legoktm(a)debian.org> Changes: php-luasandbox (4.1.2-1) unstable; urgency=medium . * New upstream version 4.1.2 Checksums-Sha1: 54305dffacdb5704131d22b39a9a9e2a9e810891 2118 php-luasandbox_4.1.2-1.dsc 3d4779ed3ae3ca96970411700a239e355d4c4a65 57828 php-luasandbox_4.1.2.orig.tar.xz 067cb8bedd4cf053c65f555bf87bc21f3daa24dd 11612 php-luasandbox_4.1.2-1.debian.tar.xz f032ca82573ef30a43ee1eaed37b16dfe7ac27ba 7336 php-luasandbox_4.1.2-1_amd64.buildinfo Checksums-Sha256: 30182aec1b4203246740c3bf74f8c787c4b7937d5c064bb60680d82a1ddbf488 2118 php-luasandbox_4.1.2-1.dsc 9d8038e0c5afbc37db10614b20cac1cef9b233619ef6288002269b05d839db9b 57828 php-luasandbox_4.1.2.orig.tar.xz 8ce9752f9a0df8e37db3fe2050932519c142889148b26c1433ec137f42fa60c3 11612 php-luasandbox_4.1.2-1.debian.tar.xz 3d4d26643f3735277969002e476d481fe9e889df0dbc2f148d39c8572f052156 7336 php-luasandbox_4.1.2-1_amd64.buildinfo Files: 17935c66ff706e74825db7caf9d84e17 2118 php optional php-luasandbox_4.1.2-1.dsc e6e8313eba1e2c04d196d245d6993574 57828 php optional php-luasandbox_4.1.2.orig.tar.xz a9dafcd57d976d9c4f485412a1135c1a 11612 php optional php-luasandbox_4.1.2-1.debian.tar.xz 53e5feac2ab1897332c0155e921da6cf 7336 php optional php-luasandbox_4.1.2-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE2MtZ8F27ngU4xIGd8QX4EBsFJpsFAmX/jcQTHGxlZ29rdG1A cmlzZXVwLm5ldAAKCRDxBfgQGwUmmz3eEACz/6lpoTG+oWyalALtAm47Bn5w6wca M+p48OHgOpjH8IPLc9E2zAYTCzu13M8NUy1lYiqRMEpiQVjnfqRKXUTNfcOUA132 GCpfyJW1nMqbE4mPrTavPoihbkDPrcYvXk6O5HHQdUhc63RzkI301N2HKZX+U7jb 9CLLwnmxQJcYUImCTKWSnlY1WSysVVQt7atp7MLZ4EbqSokTxfacSI0fbhyUbb27 O9MmZBIBeUJiB98LYKtgaxeaYuPR9eGny7ZnAttRZX2eDPnWNOZ1l+fYkXw9/34v DkMbFPIParZfM0nq1sj6gLkhP7M1Xs/+hekNGPgNjvR2KXR+f9xLQ3fL/sfMNabV cb1x9hSZ8OFOS5wl/CBOG3IiakYri+kQWqWuaPPBKb83uFZE8jVibj4+mga806sw G+DSddX/Mbc7nJXVrLH9G89CFpJZxhXF2HbLbRqN6UvWJofTFGk57vutmbfwpTpH sjv2h84esgt54YjV8zmD7+LytlkliNZZnM6y0Xwa7qPc5SwwcHuOpaQ8G1acMQ7i vQk29ceMEM/IfxA+0o5LzSYX45qssKtKDFIvtXq+TfPQompCs0+lyXE1naqEZn4i 4W90MCWETa5IkT7xtYsazFqS35iwSkSAbFixhl8gb5GpGNrW+TwA57saxRt+jKvV PhrP9hPMT9kyIg== =zjoL -----END PGP SIGNATURE-----

1 0

php-excimer_1.2.1-1_source.changes ACCEPTED into unstable
by Debian FTP Masters 24 Mar '24

24 Mar '24

Thank you for your contribution to Debian. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 23 Mar 2024 21:50:14 -0400 Source: php-excimer Architecture: source Version: 1.2.1-1 Distribution: unstable Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian(a)lists.wikimedia.org> Changed-By: Kunal Mehta <legoktm(a)debian.org> Changes: php-excimer (1.2.1-1) unstable; urgency=medium . * New upstream version 1.2.1 * Bump debhelper from old 12 to 13. * Set upstream metadata fields: Repository. * Update standards version to 4.6.2, no changes needed. Checksums-Sha1: 3abac37f1d6dd049f7898be8e9b1ab36a6775201 2050 php-excimer_1.2.1-1.dsc 88d0c020ba866028fe248413ef3c5dcfc2880f44 29948 php-excimer_1.2.1.orig.tar.xz 03d7728079f78b0519f098b16c42f90275275897 2484 php-excimer_1.2.1-1.debian.tar.xz 74e8bbdff46c294a2f182eb4e975961d11587bf6 7048 php-excimer_1.2.1-1_amd64.buildinfo Checksums-Sha256: 3ba6458c2be8ae0048caade71c4fe444759388baf0c54694d12bc902f692b9b4 2050 php-excimer_1.2.1-1.dsc 68db8c5be0e2bec36e38a3269ac0ddaf28ef89c0ecfb37f7db7b23eb9297443b 29948 php-excimer_1.2.1.orig.tar.xz ab9bcab0188f1f4184f28a0e9aacdbd2c0a885fbce992be4f2ed057a0973206c 2484 php-excimer_1.2.1-1.debian.tar.xz 358c83c62acf32666a3e54a20b529470f5d529371d790bfa83319af004d4d3ed 7048 php-excimer_1.2.1-1_amd64.buildinfo Files: 7a3c883f94ed4ea2b175f34823f7ceb3 2050 php optional php-excimer_1.2.1-1.dsc 532952f32f72f4eedceffc81c30c17da 29948 php optional php-excimer_1.2.1.orig.tar.xz b87be6177d1b4119c3909b2746936421 2484 php optional php-excimer_1.2.1-1.debian.tar.xz d9ce4136c2d6a498ba1c4fed5600b382 7048 php optional php-excimer_1.2.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE2MtZ8F27ngU4xIGd8QX4EBsFJpsFAmX/h8cTHGxlZ29rdG1A cmlzZXVwLm5ldAAKCRDxBfgQGwUmmxlBD/4td4kg6G6oNp5/2imh8MfM25QJMGig 6cwC8BXsxPVREU2BCGkELLKUq8iNFSbgN7YXcko1565dOmzgfPaINK6Kt5RSszQp LYspQtiZcaM5vdDEt1fC100SBjlEqZ5P5os/ZlX/VD+6fSfrVoMw56Ez25BWomXl q4IP+3rsxhW52OrkZr064onMZYBvdsAltWzUEoqrLQADih3PIICDtrdX/4ArLpwb qYVtZllVZ1WKA2e3d4avhgavYhvK+Yp9FwWHkXIh79j62Sbpi3lVDuDh6Hi8n47C Ut0AXb1YFmJhZ1pOL7bwpyp642X7/hFqxu1Oa2r/kVwHLN8IrXPuBz7UEXr4yHIC S74eaT5S919Z5ugWS8MlyBfe1fU5jD/bI55gSnFwEiSw889sLnZUvwGz//c8W1lH h4YRW4AXbG6HAMKr08XJUsJCbnx7uEMeDpaC6j4ijEW51k5nO6e4HWVvyhtSSWp8 01UmLkulcum11F9KDReGxgd2RGni9h9OUpOm33VQCkQT5/5/KGzE/R3ievW9/uva MzIF3oxHw6VcMJXbMz9tVIekj+QmE80TtUIgIaTa4Wlu1+flQx/lQLNlUFeyA994 VjGA9mRGx4jl5sWH6NkfdnDJJxuF1LWwiokYIXXM7eKYpJd58GOidqFbXOqDWnR3 Ez/Qnz+RzWCCIg== =A93/ -----END PGP SIGNATURE-----

1 0

Processing of php-luasandbox_4.1.2-1_source.changes
by Debian FTP Masters 24 Mar '24

24 Mar '24

php-luasandbox_4.1.2-1_source.changes uploaded successfully to localhost along with the files: php-luasandbox_4.1.2-1.dsc php-luasandbox_4.1.2.orig.tar.xz php-luasandbox_4.1.2-1.debian.tar.xz php-luasandbox_4.1.2-1_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

1 0

Processing of php-excimer_1.2.1-1_source.changes
by Debian FTP Masters 24 Mar '24

24 Mar '24

php-excimer_1.2.1-1_source.changes uploaded successfully to localhost along with the files: php-excimer_1.2.1-1.dsc php-excimer_1.2.1.orig.tar.xz php-excimer_1.2.1-1.debian.tar.xz php-excimer_1.2.1-1_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

1 0

2024

2023

2022

2021

2020

2019

2018

MediaWiki-Debian March 2024