-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 04 Jul 2023 15:19:28 -0400 Source: mediawiki Architecture: source Version: 1:1.39.4-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian@lists.wikimedia.org> Changed-By: Kunal Mehta <legoktm@debian.org> Closes: 1039075 Changes: mediawiki (1:1.39.4-1~deb12u1) bookworm-security; urgency=medium . [ Taavi Väänänen ] * New upstream version 1.39.4, fixing CVE-2023-29141, CVE-2023-36674 and CVE-2023-36675. * The bundled guzzlehttp/guzzle library was updated to 2.4.5 to fix CVE-2023-29197. * Update config for the bookworm branch. . [ Kunal Mehta ] * Set Breaks/Replaces for mediawiki-extensions-math (Closes: #1039075) Checksums-Sha1: afa85f9ff7c9aa7342fd6a940435eae3b26b7c0d 2563 mediawiki_1.39.4-1~deb12u1.dsc 32492d660fc298259648b848aa165a6ad64c8538 56392316 mediawiki_1.39.4.orig.tar.gz d9f1a7a399de2f34dbf6960c26cb65bafc5d50c3 195 mediawiki_1.39.4.orig.tar.gz.asc 4a78a7ee0c075c68d9984cc78d1bc924a5ed1d0e 103864 mediawiki_1.39.4-1~deb12u1.debian.tar.xz 53806cce22fe532f38e287e0e7f1add9c0d2e889 7365 mediawiki_1.39.4-1~deb12u1_amd64.buildinfo Checksums-Sha256: bb063f360d77c1dbd118f73cf7490986adc70292306d5ac7f34e2a18fbf17ae0 2563 mediawiki_1.39.4-1~deb12u1.dsc 9d95b7c68900438d87f01191b7c6512659b929a06bf67f08a858ec2d5123e3f5 56392316 mediawiki_1.39.4.orig.tar.gz ceeb106d0fdb189dd93582c337a5bbda0f8ccfe92bdb8403c5e442c46f28be62 195 mediawiki_1.39.4.orig.tar.gz.asc 70b1b8e32925e914d497b358505ffe11321a92812be886b34745c5e8d375696a 103864 mediawiki_1.39.4-1~deb12u1.debian.tar.xz bb559d183f71b8c02b91ca417d8b8f4816a9d2ad62d641dc746d44ce58e4936c 7365 mediawiki_1.39.4-1~deb12u1_amd64.buildinfo Files: d857df35b33cecfff8fd3cb9cdd8e26f 2563 web optional mediawiki_1.39.4-1~deb12u1.dsc b1c25ec32c4626d16d40ba6e9f353dca 56392316 web optional mediawiki_1.39.4.orig.tar.gz a441ca3463a824b042b43b8c44deca20 195 web optional mediawiki_1.39.4.orig.tar.gz.asc c2469eea25637525859b0a9426703596 103864 web optional mediawiki_1.39.4-1~deb12u1.debian.tar.xz e0178620c94b832ddc625f7572ae37fc 7365 web optional mediawiki_1.39.4-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE2MtZ8F27ngU4xIGd8QX4EBsFJpsFAmSkc7YTHGxlZ29rdG1A cmlzZXVwLm5ldAAKCRDxBfgQGwUmm95WD/45EajdB5KngCSao2j99M0IoQgM++3s GlsvmB5uZX0qz37WaT/qEnQYT/DU9FnZSRjCxgMHn+Nzmxizun3eVuEiZqlEQE+M yMAcnpGOSagFQNUXT6M4QBBDTFfH9FTOqMcDaMVYQvPvLvhbZ++/o9un8QkhSBZc y2NqRDAiEUx3kz9VEIw/T7BmYTkGtLstZaIGtjys0RCI928FQYrG44jq0fpmmOTz 6/yG1ggVVKC7DInBVTwm5OUefZISb0pM1MantdMNzBcXjHVastTJwKlwUQFEZ7+I eOiHEeNIe/F3+jFXTK03j/e1BfiU8TJyD4JaPVPCVncT1xoWE9/DKY17fIYCg9in HZYFiJgdBX4bioGoFkxlPmpCnF4B5lLW/qQCElFtRUzd9zV8kOZJHsQHybx6pIjV fz+NqEBJ3tAJAwEp2J3vrjKSxBfhGqQkvMWenngTbJ2l6LaS12HlqfE+jBO7oDYJ ZFj9fSqsCnbq76VpISq465OSOlNVcBO9mozGs2u5g4WzP43mbDMPgdgrakQgaEuz Ov9/L3n0cLN9nOuSgQrjw2POaLFKkp2RNq+QtEbq5upxnDCxW8yR2RIi8vanlh0d 0BgQbEYzwoW/u72lRTXWvtLd7XyoYB+aHB+X8hzIGvlB7dDaUyNtGWf7Md/j65+t AkZGM/F1vAtF0g== =X5gi -----END PGP SIGNATURE-----