[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1108865: marked as done (unblock: mediawiki/1:1.43.3+dfsg-1)

Your message dated Sun, 6 Jul 2025 21:26:14 +0200
with message-id <aGrN1qAOofbzSBZZ@eldamar.lan>
and subject line Re: Bug#1108865: unblock: mediawiki/1:1.43.3+dfsg-1
has caused the Debian Bug report #1108865,
regarding unblock: mediawiki/1:1.43.3+dfsg-1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1108865: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108865
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Severity: normal
X-Debbugs-Cc: mediawiki@packages.debian.org, team@security.debian.org, Taavi Väänänen <taavi@debian.org>, carnil@debian.org
Control: affects -1 + src:mediawiki
User: release.debian.org@packages.debian.org
Usertags: unblock

Hi Release team, hi Taavi,

mediawiki was affected by some CVEs, namely:

   * New upstream version 1.43.3, fixing CVE-2025-6926, CVE-2025-6927,
     CVE-2025-6589, CVE-2025-6590, CVE-2025-6591, CVE-2025-6592, CVE-2025-6593,
     CVE-2025-6594, CVE-2025-6595, CVE-2025-6596, CVE-2025-6597.

corresponding  DSA was released some days ago:
https://lists.debian.org/debian-security-announce/2025/msg00121.html

Can you consider lowering the migration time for mediawiki itself?
(Otherwise it should be fine, it has autopkgtsts, is not a key package
and should go in as well at given time).

Regards,
Salvatore

--- End Message ---
--- Begin Message --- 
Hi,

On Sun, Jul 06, 2025 at 10:18:50PM +0300, Taavi Väänänen wrote:
> Hi Salvatore,
> 
> I already filed #1108851 earlier today about this following Moritz's advice
> from earlier this week. Sorry for not keeping you updated here!

I'm the one who has to apologise for having wasted your time. I did
miss your earlier request when double-checking packages needing to
migrate with security fixes.

Closing this bug then!

Regards,
Salvatore

--- End Message ---
Reply to: