-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Apr 2026 23:14:53 +0300 Source: mediawiki Architecture: source Version: 1:1.43.8+dfsg-1 Distribution: unstable Urgency: medium Maintainer: MediaWiki packaging team <mediawiki-debian@lists.wikimedia.org> Changed-By: Taavi Väänänen <taavi@debian.org> Changes: mediawiki (1:1.43.8+dfsg-1) unstable; urgency=medium . * New upstream version 1.43.8, fixing CVE-2026-5266, CVE-2026-34086, CVE-2026-34087, CVE-2026-34088, CVE-2026-34091, CVE-2026-34092, CVE-2026-34093, CVE-2026-34094, CVE-2026-34095. This version is not affected by CVE-2026-34089, CVE-2026-34090. Checksums-Sha1: d5816cbe7d40c242d1da382aa4805d0fd651e8b6 2299 mediawiki_1.43.8+dfsg-1.dsc 717b79e5e69b09623f6d0f3f5d45d3777ac301ff 88788171 mediawiki_1.43.8+dfsg.orig.tar.gz cabd7e3be8e1438f84bbf3508801b709ff0165cf 113860 mediawiki_1.43.8+dfsg-1.debian.tar.xz 26cd56b56d284d1999f3ba1618fbbd6c2bc2a6cd 7088 mediawiki_1.43.8+dfsg-1_amd64.buildinfo Checksums-Sha256: 1d17c8080e8008a6766454c5b03224fab428cc662d90c36809816537721483ae 2299 mediawiki_1.43.8+dfsg-1.dsc 75ebe8aa5c9ceb5352cc3924639b96bd52b5a7cc0c93f0607f0935c895e47578 88788171 mediawiki_1.43.8+dfsg.orig.tar.gz 9020d56fc411ae0f8fb0e66de1bba2715873e4c1a6c54edbbf8804ad21a9a3e4 113860 mediawiki_1.43.8+dfsg-1.debian.tar.xz 958762460e19791364812f3a51e243949d49f47e0c1a9d94d076e121e10bb443 7088 mediawiki_1.43.8+dfsg-1_amd64.buildinfo Files: db1145a81006fe3ac66f414c7a9c3812 2299 web optional mediawiki_1.43.8+dfsg-1.dsc 146a62d692548e677b00717b48307993 88788171 web optional mediawiki_1.43.8+dfsg.orig.tar.gz cfcc638a6eb34e681b790a8a7c8319ff 113860 web optional mediawiki_1.43.8+dfsg-1.debian.tar.xz 35f313e72109b0dab82597befb0ec0d2 7088 web optional mediawiki_1.43.8+dfsg-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmnO0HARHHRhYXZpQGRl Ymlhbi5vcmcACgkQ7yQvcJ+RL76xug/+LarcBcq03n4JvkppKT5dzfxc+GeoR2ft UKPTYp3TJcyr//0881UxucclFWaFBOR1lxMGDQs7V+EkWdAEIJFLTGyeRCrEZnXf 4Xp/PYjhRtKg4257g4TvWy81BNWMC4jq37QDUq8cnD1U0IWW/sTqq3zJ7maRE+p8 JOk4ownh4ZEMe5kLP16GJ2nlkX1MEY6cwcPxjLY+NRS4GxQAidHH02XltlY7TixF HAPw0hl0Q/ORsAbhM7GfgwiDhlK3bu9QqvTbAuyILDno2poPirnl5yVohNo2XO08 q/AzFjZXTycvqTDy5+whet1AeaxNwKKDjU3I4Vfe7SCCJzAeucOwPUexx3tiU77a gYN/ajBuKAnzN1HSJfUQkXKwxfTyJrKPy1Ow3iuQh5mzspNjjCJvYcNXWKDXv5O2 touGxovncI1oyVyemvqI9WqxzLqLFA5gPyUbPm824elnKSH7U3H5DGxZvetwJYns V6cvuv9ErVUvyC0UKmfV+ZtuMPfGkgboc4FoKkXjGlQHcappwZC+oWPW7kVPrCkr hzSkLBrQQvPXv21cHk4VAN2qjuO49UP2EiBlj6slCDSyh2UVVSADO0J7VYEQpgsz tDEpC6Os5m4BQnCFl7UPqQayLROwlx8svMlnfXngyrF7KTvKvLB5TBW7PKD8dUWz GNxAYyvknDQ= =+zO6 -----END PGP SIGNATURE-----