[Bug 1960154] Re: Sync mediawiki 1:1.35.5-2 (universe) from Debian unstable (main)

[Logan Rosen]

This bug was fixed in the package mediawiki - 1:1.35.6-1
Sponsored for Kunal Mehta (legoktm)

---------------
mediawiki (1:1.35.6-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 1.35.6, fixing CVE-2022-28201, CVE-2022-28202,
    CVE-2022-28203. This version is not affected by CVE-2022-28204.
  * Update php extension recommends from composer.json

 -- Taavi Väänänen <hi at taavi.wtf>  Fri, 01 Apr 2022 16:49:04 +0300

mediawiki (1:1.35.5-2) unstable; urgency=medium

  [ Lucas Werkmeister ]
  * Remove PHP 5 support from mediawiki.conf

  [ Kunal Mehta ]
  * Make it easier to debug autopkgtest failures
  * Increase PHP's max_execution_time for autopkgtests to 300s, thanks
    to Paul Gevers and Bryce Harrington for input and helping test.

 -- Kunal Mehta <legoktm at debian.org>  Thu, 27 Jan 2022 00:46:22 -0800

** Changed in: mediawiki (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-28201

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-28202

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-28203

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-28204

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1960154

Title:
  Sync mediawiki 1:1.35.5-2 (universe) from Debian  unstable (main)

Status in mediawiki package in Ubuntu:
  Fix Released

Bug description:
  Please sync mediawiki 1:1.35.5-2 (universe) from Debian unstable
  (main)

  Explanation of the Ubuntu delta and why it can be dropped:
    * d/p/php8.1-increase-formatjson-timeout.patch: Avoid dep8 failure on
      armhf architecture due to FormatJson timeout during page rendering
      in Apache2.
      * Patched in Debian a bit differently so it only affects autopkgtests, see
        <https://salsa.debian.org/mediawiki-team/mediawiki/-/commit/3c3d2717429d330704e4ec1d13c128fc15ddda72>.
    * d/t/assert-http: Make it easier to debug autopkgtest failures.
      Use (unreleased) Debian changes suggested by Kunal Mehta.
      * Included in Debian.
    * d/t/install-[mysql|postgresql|sqlite]: Drop per-test check in favor of
      Debian's approach.
      * n/a
    * d/t/install-[mysql|postgresql|sqlite]: Dump error.log on failure
      * n/a

  Changelog entries since current jammy version 1:1.35.5-1ubuntu3:

  mediawiki (1:1.35.5-2) unstable; urgency=medium

    [ Lucas Werkmeister ]
    * Remove PHP 5 support from mediawiki.conf

    [ Kunal Mehta ]
    * Make it easier to debug autopkgtest failures
    * Increase PHP's max_execution_time for autopkgtests to 300s, thanks
      to Paul Gevers and Bryce Harrington for input and helping test.

   -- Kunal Mehta <legoktm at debian.org>  Thu, 27 Jan 2022 00:46:22 -0800

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mediawiki/+bug/1960154/+subscriptions