-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Jul 2026 14:30:37 +0300 Source: mediawiki Architecture: source Version: 1:1.43.9+dfsg-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: MediaWiki packaging team Changed-By: Taavi Väänänen Changes: mediawiki (1:1.43.9+dfsg-1~deb13u1) trixie-security; urgency=medium . * New upstream version 1.43.9, fixing CVE-2026-58024, CVE-2026-58025, CVE-2026-58026, CVE-2026-58027, CVE-2026-58028, CVE-2026-58029, CVE-2026-58030, CVE-2026-58032, CVE-2026-58033, CVE-2026-58037. This version is not affected by CVE-2026-58036. * Drop patches merged upstream. Checksums-Sha1: 16084ee8795f88abe901ca76414af6397beaf8a8 2331 mediawiki_1.43.9+dfsg-1~deb13u1.dsc 5772aaca15161b1ea729d0acf77e9d7edd0fb5e3 89199532 mediawiki_1.43.9+dfsg.orig.tar.gz 750ead1c7aa2eda7aaa377450f305be93a7ed9b4 113888 mediawiki_1.43.9+dfsg-1~deb13u1.debian.tar.xz c0b85b5d9a485b386db80e5b537b37ffc6b51c8c 7272 mediawiki_1.43.9+dfsg-1~deb13u1_amd64.buildinfo Checksums-Sha256: d0963e7a8fa7d3154480a9f21af9eb5ab455f6c77abb34e53a85645c918aa322 2331 mediawiki_1.43.9+dfsg-1~deb13u1.dsc 3ce10f2f725e11c9da07a0e4f9db7cc7a761ec24a709e9efce6230c08050a9e2 89199532 mediawiki_1.43.9+dfsg.orig.tar.gz b8886f73f4bec0e95de3faddac5a338ba4e4cfc37f4fa431ed5f2b8e355ed84c 113888 mediawiki_1.43.9+dfsg-1~deb13u1.debian.tar.xz 71a1288a1bca173d9c87601a9502635b0b4e8cc9ea2704ce797b096a1dc20d19 7272 mediawiki_1.43.9+dfsg-1~deb13u1_amd64.buildinfo Files: b60275d2934f3a223cb4c26bc957ebea 2331 web optional mediawiki_1.43.9+dfsg-1~deb13u1.dsc 2ecd6d314432da78e0e01f85abe3cb6d 89199532 web optional mediawiki_1.43.9+dfsg.orig.tar.gz 52c8b2d24a495b09047adca24fb29436 113888 web optional mediawiki_1.43.9+dfsg-1~deb13u1.debian.tar.xz a4714c0aa4203d822ad3f35981859388 7272 web optional mediawiki_1.43.9+dfsg-1~deb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEENGVGnLGdYeXi6or77yQvcJ+RL74FAmpKQp0RHHRhYXZpQGRl Ymlhbi5vcmcACgkQ7yQvcJ+RL74sWA/+OEgrltwdtocZ7SH+TOP9CdB7ocBcnpsl fnFVNWDL++1dyQrm+xVBxEE6YZKzH1IwIkzmJnIIUlkVQnLsR0b+kMAdabJ+4fgJ 3d2EUWwHptmRip11L6TVcAHyALdkkH5dcjWm4q2sHr8tdeq9zSLXMyNOGkbGtml8 oiVr6/BugW0IBEpU5cPRlgtPPwuwRcEQAbRlVVlnH2kwexOOyFdOZrOeAkPqtRFN gkPYSpadzbn4M7hAi5tZ9B1EQyD27aSF4WaFNpxGH6Zbqssr4+HUYHHHYR5ahKFD mDDAKsDkj6FvTvGnZN1PSIpGz8S8s3vfR63KTqxT0K3F8aC0bwOMNxiOq61U8jhP MhcKR1XysbSm2VrnNjnSSslWuyiEyo4Upyitv9ehUE5rgsd+IlRvQnGmP1a5swDf bVL6V8AWpvo9fx2R9TyMZkBPUsDFNGdis/XLQqZcwpPcbX4SBvNJzh6oKhLiEX3Q W3jlCEuEA+/wDeq66dYily1bNhhSkSFSTp3tG1+x9+O9Ne5cusCqoerj8bxrYWlS 2V98K5uo8GIDLVG8XiD+x0XpTF883oSJ6qtGPdXrD7LIxQmwrx7nAI3cLG5CaX5Y R1FE7/FkMpXWQTU2f+rA9ncUU2WehBVIF5QL+F4t2vSx2tXIyhHMil4XqtuGEebc Ulcbhqdd5zw= =n8Fa -----END PGP SIGNATURE-----