[Pkg-mediawiki-devel] Bug#743182: mediawiki: Mediawiki broken after security update

[Tom Laermans]

Package: mediawiki
Version: 1:1.19.14+dfsg-0+deb7u1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

Updating from 1:1.19.5-1+deb7u1 to 1:1.19.14+dfsg-0+deb7u1 on Debian Wheezy, leads to the following errors in the apache
log:

[Mon Mar 31 11:12:45 2014] [error] [client 192.168.1.1] PHP Warning:  require(/var/lib/mediawiki/includes/libs/HttpStatus.php): failed to open stream: No such file or directory in /usr/share/mediawiki/includes/AutoLoader.php on line 1009
[Mon Mar 31 11:12:45 2014] [error] [client 192.168.1.1] PHP Fatal error:  require(): Failed opening required '/var/lib/mediawiki/includes/libs/HttpStatus.php' (include_path='/var/lib/mediawiki:/var/lib/mediawiki/includes:/var/lib/mediawiki/languages:/var/lib/mediawiki:/var/lib/mediawiki/includes:/var/lib/mediawiki/languages:.:/usr/share/php:/usr/share/pear') in /usr/share/mediawiki/includes/AutoLoader.php on line 1009

Confirm:

root at puppet-test:~# dpkg -L mediawiki|grep HttpStatus
root at puppet-test:~# 

Contrary to what https://packages.debian.org/wheezy/all/mediawiki/filelist
is listing.

Previous package:

root at pluto:~# dpkg -L mediawiki|grep HttpStatus
/usr/share/mediawiki/includes/libs/HttpStatus.php

Reverting to 1:1.19.5-1+deb7u1 fixes this issue.

I'm using the LDAP auth package as well but at first sight this doesn't matter.

-- System Information:
Debian Release: 7.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mediawiki depends on:
ii  apache2                      2.2.22-13+deb7u1
ii  apache2-mpm-prefork [httpd]  2.2.22-13+deb7u1
ii  debconf [debconf-2.0]        1.5.49
ii  libjs-jquery                 1.7.2+dfsg-1
ii  libjs-jquery-cookie          6-1
ii  libjs-jquery-form            6-1
ii  libjs-jquery-tipsy           6-1
ii  mime-support                 3.52-1
ii  php5                         5.4.4-14+deb7u8
ii  php5-mysql                   5.4.4-14+deb7u8

Versions of packages mediawiki recommends:
ii  mediawiki-extensions-base  3.5~deb7u1
ii  mysql-server               5.5.35+dfsg-0+wheezy1
ii  php-wikidiff2              0.0.1+svn109581-1
ii  php5-cli                   5.4.4-14+deb7u8
ii  python                     2.7.3-4+deb7u1

Versions of packages mediawiki suggests:
pn  clamav                 <none>
pn  imagemagick | php5-gd  <none>
pn  mediawiki-math         <none>
pn  memcached              <none>

-- debconf information:
  mediawiki/webserver: apache2