-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 29 Mar 2024 13:51:27 +0200 Source: mediawiki Architecture: source Version: 1:1.39.7-1~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian@lists.wikimedia.org> Changed-By: Taavi Väänänen <hi@taavi.wtf> Changes: mediawiki (1:1.39.7-1~deb12u1) bookworm-security; urgency=medium . * New upstream version 1.39.7, fixing CVE-2023-51704, T355538 (XSS in edit summary parser, CVE pending) and T357760 (DoS in Special:MovePage, CVE pending). Checksums-Sha1: aa884701b6e6b684a9d0213b73ab1a9b5cacc725 2563 mediawiki_1.39.7-1~deb12u1.dsc b10d62584b72b3a2a6525841fb99af4655c0d8a2 58551899 mediawiki_1.39.7.orig.tar.gz 6ab75b62b1aed3305693de49082a169e895ab652 195 mediawiki_1.39.7.orig.tar.gz.asc 0294f2479eae5e861c079809c320d8d1056ca32b 102956 mediawiki_1.39.7-1~deb12u1.debian.tar.xz 471418edcfde3fc5c2e5de90f0757725015d2200 7458 mediawiki_1.39.7-1~deb12u1_amd64.buildinfo Checksums-Sha256: aa052a5c58a51d7f7681f9dc68baca3f6c773f409b2fe2941730ab3d3bbc86c6 2563 mediawiki_1.39.7-1~deb12u1.dsc 2be8156817d5c569fd6257342a276f91d7e530d1c0dce1134b7bf2b09ecae569 58551899 mediawiki_1.39.7.orig.tar.gz 096f0918b82529f9c5718364752e607ef96c797dded8ce79af72b5c9792e595f 195 mediawiki_1.39.7.orig.tar.gz.asc b5a13e7c434993570e21efe10d545f61fee54d1131546f19becc147385b53c41 102956 mediawiki_1.39.7-1~deb12u1.debian.tar.xz 7ede204dc88d77056f5e7c78533af04460e4cbf7de442e089f4582b57686ade2 7458 mediawiki_1.39.7-1~deb12u1_amd64.buildinfo Files: 974aefabf2acafff74bfa582791e50f2 2563 web optional mediawiki_1.39.7-1~deb12u1.dsc 8b8dd2270a10dfc1c703014b8950def7 58551899 web optional mediawiki_1.39.7.orig.tar.gz 76f5120b0a9ffd9e239eba582cf35f35 195 web optional mediawiki_1.39.7.orig.tar.gz.asc 92fbfc362e9cf303c9a4aa70ccf3e27b 102956 web optional mediawiki_1.39.7-1~deb12u1.debian.tar.xz 3eb3253f51b5a909a7074b3a23cde8d2 7458 web optional mediawiki_1.39.7-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE2MtZ8F27ngU4xIGd8QX4EBsFJpsFAmYI260THGxlZ29rdG1A cmlzZXVwLm5ldAAKCRDxBfgQGwUmm9osEADCjiqeZPCAXnFSS8LFlcktYZGsdaew Llf2loOuosYHqC9R+WUcAUsr65RKhCWrQI/zd2mj3WXsLt2plJIDFZNKaATPkCzf IofFrE0fC6BUGehc4KLu01L9Wr1/ILNsQND1Lq6jrd6BY2xMaU/9Grhi0MtICP+B ltplVV5OsLmUy28r9f6dDlHld4nMueA5SdedRaJaeK8nE8WcS3el6S9mtuHYVFlg /9yYv0by4SEl/fqGBJO/Llh+si7LdBh8zo60zLtVDjAKYIM8Nqkk/jkDjudSyWGL 61W9zz0h399oZaS2rSH+xc7+FZ6hU+/1TssclPGrtG77U1JnOFqu10hVYEUPTRA+ mXwWeTV4kvj/J4gFtAo86qwaIAb+pn5qvdsZ1g+02wJfJGWl0P+TYnuK95ElUGfv KDRU/+s+4zDHppiN0hZPfJ3Z+i1hTb+XYoebVFWGM1Mo2FMDC3wrZLyZhqH//IFi 2CgNMQ+baOVE9bS+G2IuPVG7jtjeMm+mRvncojjaVjpRwO4nGNlL4/febtHxnrCu vOVVf1AN0pPIrQ23QwL6sMVbYtDGPcpY6GWOeQ8HKbxEKKZkEscU03oCVOOdCwtB HBMMoesX6mrOSxW4X6K7diyD6iCsOrcGxpQBXcGlENk6qYgaG3lqBvKBT+tLxSQ2 qL7+aCO/KU2ZMQ== =JMoA -----END PGP SIGNATURE-----