-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 01:17:36 +0300 Source: mediawiki Architecture: source Version: 1:1.43.8+dfsg-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: MediaWiki packaging team Changed-By: Taavi Väänänen Changes: mediawiki (1:1.43.8+dfsg-1~deb13u1) trixie-security; urgency=medium . * New upstream version 1.43.8, fixing CVE-2026-5266, CVE-2026-34086, CVE-2026-34087, CVE-2026-34088, CVE-2026-34091, CVE-2026-34092, CVE-2026-34093, CVE-2026-34094, CVE-2026-34095. This version is not affected by CVE-2026-34089, CVE-2026-34090. * Refresh patch files. Checksums-Sha1: d9f211d3ea4f7f627a40c80c50c11d604d0e15ee 2331 mediawiki_1.43.8+dfsg-1~deb13u1.dsc 717b79e5e69b09623f6d0f3f5d45d3777ac301ff 88788171 mediawiki_1.43.8+dfsg.orig.tar.gz efae4af382a21ac2d97a9f9a2473e975ff7ef6de 114288 mediawiki_1.43.8+dfsg-1~deb13u1.debian.tar.xz e074cd0f87790df41999eb5894fe38a7f0ddeda6 7222 mediawiki_1.43.8+dfsg-1~deb13u1_amd64.buildinfo Checksums-Sha256: 44030966f0d312398465915c5a341ba1b865b4ad4f2d3194406d16a79d10ca9c 2331 mediawiki_1.43.8+dfsg-1~deb13u1.dsc 75ebe8aa5c9ceb5352cc3924639b96bd52b5a7cc0c93f0607f0935c895e47578 88788171 mediawiki_1.43.8+dfsg.orig.tar.gz 298d13dabd8c5353213ad29305e1c1695df575bccad0c68804938b34549093c8 114288 mediawiki_1.43.8+dfsg-1~deb13u1.debian.tar.xz 9861f1c14ab057eb2f0a96bd4f039061e947ed800bf7fa7116231aa3181fd0c1 7222 mediawiki_1.43.8+dfsg-1~deb13u1_amd64.buildinfo Files: 9644be68bc91a93da0120aa8cb8d5a9f 2331 web optional mediawiki_1.43.8+dfsg-1~deb13u1.dsc 146a62d692548e677b00717b48307993 88788171 web optional mediawiki_1.43.8+dfsg.orig.tar.gz d818d4b0894dfd76b7d7b5d3319ee029 114288 web optional mediawiki_1.43.8+dfsg-1~deb13u1.debian.tar.xz 0cedb32f7607ee6b7ab3c16e9216e7cd 7222 web optional mediawiki_1.43.8+dfsg-1~deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmnZekgRHHRhYXZpQGRl Ymlhbi5vcmcACgkQ7yQvcJ+RL76EDBAAuQygjfmvqr5nYrTp70arjyNZXcSXsG74 UXiEIyhU6mJ7D96WbO9WO5MLARVlSIOVcBbzwtHGCT0PaAMTRiRlx3dMbFU5Ot6f FME6G/vCzoawmHpndcjViOfS1iaWwWm/XSRbofslxkoTFrq+GKixw1W/vmKDFDgM jEaV+REL/XG3KmkQt1jiC4l6NUQn7i8EUi9DqnKb0HgTC/XnyYg9e95JxwOXPXek ei87fb5dBez1cD81ylrMX0Fq52ScGqcLQZ4AIDBpPGlyJmWsvXojVKZRMMg56/fl Qm68Ce2T5wnhN8ijTldmMqsE+YN/ZTuNx/rmMtHS8aiiAfc8FakszXBaHk4jLoa6 9BIjD9fdkX0taBqWo0WDN3Mjl0T7DjVdjQuJQTlkOcBw92Au8Xxf3iYBGCQrPGiw p/gsVuU0ftUzWgpq7sCbu6oGSPtpsbZcu9JMsmXXgDG1ec61KkM2kDNohLAhNgZt q1ltw6Ku/peGDnAH1mKIKJx7+4sy3Rj8kEpMuYpmWW0yNZQ1zhKHRMOk3KisUpMG YVgOwHsvaQ3N1drMUfUQAZNuPKaHIc/h7w/n/Y0xbmWnXnwC+RHRP6d44oN7Xm6F RldmdxlryrnubKViXtzmlV2l8+iZSrBufL5gPlXohxG10oGAChPkyTEJQ+/3z8ft +So+FZy2smU= =dsJa -----END PGP SIGNATURE-----