Source: mediawiki
Version: 1:1.31.1-4
Severity: normal
Tags: patch upstream

Dear maintainers,

MediaWiki 1.31.1 appears to have some incompatibilities with PHP 7.3
which is in Buster. Uploading files, such as images, leads to a
UploadStashBadPathException presented on the web interface, and the
server logs include the following PHP warning:

PHP message: PHP Warning:  preg_match(): Compilation failed: invalid
range in character class at offset 4 in
/usr/share/mediawiki/includes/upload/UploadStash.php on line 247

Some searching suggests this is caused by a broken regex that PHP 7.3 no
longer silently accepts:

https://www.mediawiki.org/wiki/Topic:Utp24qj8pnmpah8p
https://phabricator.wikimedia.org/T215632
https://gerrit.wikimedia.org/r/#/c/mediawiki/core/+/467546/

This will apparently be fixed in MediaWiki 1.31.2 when that's released,
but given that file uploads appear to be non-functional it may be worth
carrying a patch locally for the Buster release or soon after.

Thanks,
Chris

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-4-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Reply via email to