[Pkg-mediawiki-devel] Bug#508869: Bug#508869: fixed in mediawiki 1:1.13.3-1

[Romain Beauxis]

Le Monday 12 January 2009 07:51:54 Luk Claes, vous avez écrit :
> Hi

	Hi !

> This 'security' update was uploaded to unstable, but seems to be still
> outstanding for testing. Unblocking the version from unstable doesn't
> seem to be an option:
>
> 1130 files changed, 253693 insertions(+), 131172 deletions(-)

Yes. Unstable version is new.

> Can an upload be prepared with targeted fixes for the security issues?

It can, it is not difficult, there is a security-fix patch upstream.
The main problem is that this patch is huge and includes new stuff and does 
not ony fix existing stuff.

The solution is to apply the security patch and have it reviewed and accepted 
by the security team.

However, I am way too busy these days to handle this. I have mentioned this in 
my original bug report (#508860) wich was later closed in favour of two more 
detailed ones.

I have also contacted the security team but didn't get any feedbacks. I know 
they are busy, of course.

The two issues should be quite easy to handle for any interested contributor 
looking at this message.

Romain