Version in base suite: 4.4.15+dfsg-0+deb13u1 Base version: spip_4.4.15+dfsg-0+deb13u1 Target version: spip_4.4.19+dfsg-0+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/s/spip/spip_4.4.15+dfsg-0+deb13u1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/s/spip/spip_4.4.19+dfsg-0+deb13u1.dsc CHANGELOG.md | 19 composer.lock | 96 debian/changelog | 32 debian/patches/0001-Fix-created-directories-and-files-default-rights.patch | 2 debian/patches/0003-Fix-displayed-version-in-the-private-interface.patch | 2 debian/patches/0004-Use-getid3-class-from-the-php-getid3-package.patch | 2 debian/rules | 3 ecrire/CHANGELOG.md | 54 ecrire/action/editer_article.php | 14 ecrire/action/editer_auteur.php | 29 ecrire/action/editer_objet.php | 22 ecrire/action/editer_rubrique.php | 14 ecrire/action/instituer_parent_objet.php | 50 ecrire/action/logout.php | 15 ecrire/base/objets.php | 1 ecrire/base/upgrade.php | 13 ecrire/inc/distant.php | 133 ecrire/inc/exif.php | 103 ecrire/inc/filtres.php | 4 ecrire/inc/filtres_ecrire.php | 25 ecrire/inc/filtres_images_lib_mini.php | 35 ecrire/inc/filtres_mini.php | 7 ecrire/inc/lang.php | 43 ecrire/inc/modifier.php | 8 ecrire/inc/queue.php | 60 ecrire/inc/securiser_action.php | 7 ecrire/inc/utils.php | 19 ecrire/inc_version.php | 10 ecrire/index.php | 6 ecrire/maj/2026.php | 44 ecrire/paquet.xml | 5 ecrire/public.php | 3 ecrire/public/assembler.php | 12 ecrire/public/criteres.php | 41 ecrire/public/fonctions.php | 22 ecrire/public/quete.php | 5 ecrire/req/mysql.php | 26 ecrire/req/pg.exp.php | 1485 +++++- ecrire/req/sqlite_generique.php | 2 ecrire/src/Admin/Bouton.php | 5 ecrire/src/Afficher/Minipage/AbstractPage.php | 4 ecrire/src/Afficher/Minipage/Admin.php | 4 ecrire/src/Afficher/Minipage/Installation.php | 5 ecrire/src/Afficher/Minipage/Page.php | 4 ecrire/src/Chiffrer/Chiffrement.php | 5 ecrire/src/Chiffrer/Cles.php | 5 ecrire/src/Chiffrer/Password.php | 5 ecrire/src/Chiffrer/SpipCles.php | 36 ecrire/src/Compilateur/Iterateur/AbstractIterateur.php | 5 ecrire/src/Compilateur/Iterateur/Condition.php | 5 ecrire/src/Compilateur/Iterateur/Data.php | 5 ecrire/src/Compilateur/Iterateur/Decorator.php | 5 ecrire/src/Compilateur/Iterateur/Factory.php | 5 ecrire/src/Compilateur/Iterateur/Sql.php | 5 ecrire/src/Compilateur/Noeud/Boucle.php | 5 ecrire/src/Compilateur/Noeud/Champ.php | 4 ecrire/src/Compilateur/Noeud/Contexte.php | 4 ecrire/src/Compilateur/Noeud/Critere.php | 4 ecrire/src/Compilateur/Noeud/Idiome.php | 4 ecrire/src/Compilateur/Noeud/Inclure.php | 4 ecrire/src/Compilateur/Noeud/Polyglotte.php | 4 ecrire/src/Compilateur/Noeud/Texte.php | 4 ecrire/src/Css/Vars/Collection.php | 4 ecrire/src/ErrorHandler.php | 4 ecrire/src/I18n/Description.php | 4 ecrire/src/Sql/Sqlite/PDOStatement.php | 4 ecrire/src/Sql/Sqlite/Requeteur.php | 4 ecrire/src/Sql/Sqlite/Sqlite.php | 4 ecrire/src/Sql/Sqlite/Traducteur.php | 4 ecrire/src/Texte/Collecteur/AbstractCollecteur.php | 194 ecrire/src/Texte/Collecteur/HtmlComment.php | 4 ecrire/src/Texte/Collecteur/HtmlTag.php | 4 ecrire/src/Texte/Collecteur/Idiomes.php | 4 ecrire/src/Texte/Collecteur/Liens.php | 4 ecrire/src/Texte/Collecteur/Modeles.php | 4 ecrire/src/Texte/Collecteur/Multis.php | 4 htaccess.txt | 2 plugins-dist.json | 40 plugins-dist/aide/.editorconfig | 12 plugins-dist/aide/.gitattributes | 5 plugins-dist/aide/.gitignore | 10 plugins-dist/aide/.gitlab-ci.yml | 71 plugins-dist/aide/CHANGELOG.md | 6 plugins-dist/aide/composer.json | 27 plugins-dist/aide/ecs.php | 11 plugins-dist/aide/inc/aide.php | 42 plugins-dist/aide/paquet.xml | 9 plugins-dist/aide/phpcs.xml.dist | 14 plugins-dist/aide/phpstan-baseline.neon | 74 plugins-dist/aide/phpstan.neon.dist | 1 plugins-dist/aide/rector.php | 11 plugins-dist/archiviste/.editorconfig | 2 plugins-dist/archiviste/.gitattributes | 4 plugins-dist/archiviste/.gitignore | 21 plugins-dist/archiviste/.gitlab-ci.yml | 82 plugins-dist/archiviste/CHANGELOG.md | 7 plugins-dist/archiviste/LICENSE | 674 ++ plugins-dist/archiviste/composer.json | 53 plugins-dist/archiviste/ecs.php | 11 plugins-dist/archiviste/inc/archives.php | 16 plugins-dist/archiviste/paquet.xml | 9 plugins-dist/archiviste/phpcs.xml.dist | 14 plugins-dist/archiviste/phplint.lst | 1 plugins-dist/archiviste/phpstan-baseline.neon | 11 plugins-dist/archiviste/phpstan.neon.dist | 3 plugins-dist/archiviste/phpunit.xml.dist | 4 plugins-dist/archiviste/rector.php | 11 plugins-dist/archiviste/src/AbstractArchiver.php | 88 plugins-dist/archiviste/src/ArchiveInterface.php | 6 plugins-dist/archiviste/src/ArchiverInterface.php | 12 plugins-dist/archiviste/src/NoDotFilterIterator.php | 3 plugins-dist/archiviste/src/SpipArchiver.php | 37 plugins-dist/archiviste/src/TarArchive.php | 32 plugins-dist/archiviste/src/ZipArchive.php | 34 plugins-dist/archiviste/tests/AbstractArchiverTest.php | 178 plugins-dist/archiviste/tests/SpipArchiverTest.php | 65 plugins-dist/archiviste/tests/bootstrap.php | 9 plugins-dist/bigup/.editorconfig | 12 plugins-dist/bigup/.gitattributes | 5 plugins-dist/bigup/.gitignore | 10 plugins-dist/bigup/.gitlab-ci.yml | 71 plugins-dist/bigup/CHANGELOG.md | 14 plugins-dist/bigup/action/bigup.php | 2 plugins-dist/bigup/balise/saisie_fichier.php | 11 plugins-dist/bigup/bigup_administrations.php | 11 plugins-dist/bigup/bigup_fonctions.php | 24 plugins-dist/bigup/bigup_pipelines.php | 52 plugins-dist/bigup/composer.json | 27 plugins-dist/bigup/ecs.php | 11 plugins-dist/bigup/formulaires/tester_bigup.php | 8 plugins-dist/bigup/formulaires/tester_bigup_extended.php | 8 plugins-dist/bigup/genie/bigup_nettoyer_repertoire_upload.php | 5 plugins-dist/bigup/inc/Bigup.php | 18 plugins-dist/bigup/inc/Bigup/Cache.php | 18 plugins-dist/bigup/inc/Bigup/CacheFichiers.php | 26 plugins-dist/bigup/inc/Bigup/CacheRepertoire.php | 27 plugins-dist/bigup/inc/Bigup/Files.php | 21 plugins-dist/bigup/inc/Bigup/Flow.php | 65 plugins-dist/bigup/inc/Bigup/Formulaire.php | 32 plugins-dist/bigup/inc/Bigup/GestionRepertoires.php | 16 plugins-dist/bigup/inc/Bigup/Identifier.php | 34 plugins-dist/bigup/inc/Bigup/LogTrait.php | 7 plugins-dist/bigup/inc/Bigup/Repondre.php | 35 plugins-dist/bigup/javascript/bigup.js | 5 plugins-dist/bigup/paquet.xml | 9 plugins-dist/bigup/phpcs.xml.dist | 15 plugins-dist/bigup/phpstan-baseline.neon | 488 -- plugins-dist/bigup/phpstan.neon.dist | 3 plugins-dist/bigup/rector.php | 11 plugins-dist/compagnon/.editorconfig | 12 plugins-dist/compagnon/.gitattributes | 5 plugins-dist/compagnon/.gitignore | 10 plugins-dist/compagnon/.gitlab-ci.yml | 71 plugins-dist/compagnon/CHANGELOG.md | 4 plugins-dist/compagnon/action/compagnon.php | 4 plugins-dist/compagnon/compagnon_administrations.php | 12 plugins-dist/compagnon/compagnon_fonctions.php | 5 plugins-dist/compagnon/compagnon_messages.php | 21 plugins-dist/compagnon/compagnon_pipelines.php | 18 plugins-dist/compagnon/composer.json | 27 plugins-dist/compagnon/ecs.php | 11 plugins-dist/compagnon/formulaires/reinitialiser_compagnon.php | 8 plugins-dist/compagnon/paquet.xml | 7 plugins-dist/compagnon/phpcs.xml.dist | 15 plugins-dist/compagnon/phpstan-baseline.neon | 121 plugins-dist/compagnon/phpstan.neon.dist | 2 plugins-dist/compagnon/rector.php | 11 plugins-dist/compresseur/.editorconfig | 12 plugins-dist/compresseur/.gitattributes | 9 plugins-dist/compresseur/.gitignore | 10 plugins-dist/compresseur/.gitlab-ci.yml | 71 plugins-dist/compresseur/CHANGELOG.md | 4 plugins-dist/compresseur/composer.json | 25 plugins-dist/compresseur/compresseur_fonctions.php | 23 plugins-dist/compresseur/compresseur_ieconfig.php | 4 plugins-dist/compresseur/compresseur_options.php | 5 plugins-dist/compresseur/compresseur_pipeline.php | 20 plugins-dist/compresseur/ecs.php | 11 plugins-dist/compresseur/formulaires/configurer_compresseur.php | 27 plugins-dist/compresseur/inc/compresseur.php | 28 plugins-dist/compresseur/inc/compresseur_concatener.php | 21 plugins-dist/compresseur/inc/compresseur_embarquer.php | 26 plugins-dist/compresseur/inc/compresseur_minifier.php | 29 plugins-dist/compresseur/paquet.xml | 2 plugins-dist/compresseur/phpcs.xml.dist | 16 plugins-dist/compresseur/phpstan-baseline.neon | 374 - plugins-dist/compresseur/phpstan.neon.dist | 1 plugins-dist/compresseur/rector.php | 11 plugins-dist/compresseur/tests/CompresseurUrlsAbsoluesCssTest.php | 30 plugins-dist/dump/.editorconfig | 12 plugins-dist/dump/.gitattributes | 5 plugins-dist/dump/.gitignore | 10 plugins-dist/dump/.gitlab-ci.yml | 71 plugins-dist/dump/CHANGELOG.md | 10 plugins-dist/dump/action/restaurer.php | 23 plugins-dist/dump/action/sauvegarder.php | 20 plugins-dist/dump/action/supprimer_dump.php | 16 plugins-dist/dump/action/telecharger_dump.php | 19 plugins-dist/dump/base/restaurer.php | 23 plugins-dist/dump/composer.json | 27 plugins-dist/dump/connect/dump.php | 16 plugins-dist/dump/dump_autoriser.php | 22 plugins-dist/dump/ecs.php | 11 plugins-dist/dump/exec/base_restaurer.php | 16 plugins-dist/dump/formulaires/restaurer.php | 23 plugins-dist/dump/formulaires/sauvegarder.php | 25 plugins-dist/dump/inc/dump.php | 61 plugins-dist/dump/inc/sauvegarder.php | 23 plugins-dist/dump/paquet.xml | 10 plugins-dist/dump/phpcs.xml.dist | 14 plugins-dist/dump/phpstan-baseline.neon | 618 -- plugins-dist/dump/phpstan.neon.dist | 1 plugins-dist/dump/prive/squelettes/contenu/restaurer_fonctions.php | 18 plugins-dist/dump/prive/squelettes/contenu/sauvegarder.html | 4 plugins-dist/dump/prive/squelettes/contenu/sauvegarder_fonctions.php | 16 plugins-dist/dump/rector.php | 11 plugins-dist/filtres_images/.gitattributes | 5 plugins-dist/filtres_images/.gitignore | 10 plugins-dist/filtres_images/.gitlab-ci.yml | 71 plugins-dist/filtres_images/CHANGELOG.md | 21 plugins-dist/filtres_images/composer.json | 40 plugins-dist/filtres_images/ecs.php | 11 plugins-dist/filtres_images/filtres/couleurs.php | 34 plugins-dist/filtres_images/filtres/images_lib.php | 69 plugins-dist/filtres_images/filtres/images_transforme.php | 222 plugins-dist/filtres_images/filtres/images_typo.php | 171 plugins-dist/filtres_images/images_fonctions.php | 20 plugins-dist/filtres_images/paquet.xml | 2 plugins-dist/filtres_images/phpcs.xml.dist | 15 plugins-dist/filtres_images/phpstan-baseline.neon | 361 - plugins-dist/filtres_images/phpstan.neon.dist | 2 plugins-dist/filtres_images/rector.php | 14 plugins-dist/filtres_images/spip-cli/ImagesPurger.php | 3 plugins-dist/forum/.editorconfig | 12 plugins-dist/forum/.gitattributes | 5 plugins-dist/forum/.gitignore | 10 plugins-dist/forum/.gitlab-ci.yml | 71 plugins-dist/forum/CHANGELOG.md | 10 plugins-dist/forum/LICENSE | 674 ++ plugins-dist/forum/action/editer_forum.php | 23 plugins-dist/forum/action/instituer_forum.php | 20 plugins-dist/forum/action/instituer_lot_forum.php | 19 plugins-dist/forum/balise/formulaire_forum.php | 25 plugins-dist/forum/balise/formulaire_forum_prive.php | 25 plugins-dist/forum/base/forum.php | 35 plugins-dist/forum/composer.json | 27 plugins-dist/forum/ecs.php | 11 plugins-dist/forum/formulaires/activer_forums_objet.php | 20 plugins-dist/forum/formulaires/configurer_forums_contenu.php | 18 plugins-dist/forum/formulaires/configurer_forums_notifications.php | 16 plugins-dist/forum/formulaires/configurer_forums_participants.php | 16 plugins-dist/forum/formulaires/configurer_forums_prives.php | 22 plugins-dist/forum/formulaires/forum.php | 86 plugins-dist/forum/formulaires/forum_prive.php | 52 plugins-dist/forum/forum_administrations.php | 35 plugins-dist/forum/forum_autoriser.php | 33 plugins-dist/forum/forum_fonctions.php | 42 plugins-dist/forum/forum_ieconfig.php | 4 plugins-dist/forum/forum_pipelines.php | 29 plugins-dist/forum/inc/article_accepter_forums_publics.php | 2 plugins-dist/forum/inc/email_notification_forum.php | 35 plugins-dist/forum/inc/forum.php | 29 plugins-dist/forum/inc/forum_insert.php | 28 plugins-dist/forum/notifications/forumposte.php | 4 plugins-dist/forum/notifications/forumvalide.php | 9 plugins-dist/forum/paquet.xml | 8 plugins-dist/forum/phpcs.xml.dist | 14 plugins-dist/forum/phpstan-baseline.neon | 1445 ------ plugins-dist/forum/phpstan.neon.dist | 1 plugins-dist/forum/prive/modeles/forum_fonctions.php | 17 plugins-dist/forum/public/forum.php | 27 plugins-dist/forum/rector.php | 11 plugins-dist/forum/urls/generer_url_ecrire_forum.php | 18 plugins-dist/forum/urls/generer_url_forum.php | 18 plugins-dist/mediabox/.editorconfig | 12 plugins-dist/mediabox/.gitattributes | 5 plugins-dist/mediabox/.gitignore | 10 plugins-dist/mediabox/.gitlab-ci.yml | 71 plugins-dist/mediabox/CHANGELOG.md | 4 plugins-dist/mediabox/LICENSE | 674 ++ plugins-dist/mediabox/composer.json | 27 plugins-dist/mediabox/ecs.php | 11 plugins-dist/mediabox/formulaires/configurer_mediabox.php | 11 plugins-dist/mediabox/inc/mediabox.php | 8 plugins-dist/mediabox/lity/js/lity.mediabox.js | 6 plugins-dist/mediabox/mediabox_pipelines.php | 18 plugins-dist/mediabox/paquet.xml | 9 plugins-dist/mediabox/phpcs.xml.dist | 15 plugins-dist/mediabox/phpstan-baseline.neon | 163 plugins-dist/mediabox/phpstan.neon.dist | 1 plugins-dist/mediabox/rector.php | 11 plugins-dist/medias/.editorconfig | 12 plugins-dist/medias/.gitattributes | 5 plugins-dist/medias/.gitignore | 10 plugins-dist/medias/.gitlab-ci.yml | 71 plugins-dist/medias/CHANGELOG.md | 9 plugins-dist/medias/action/acceder_document.php | 16 plugins-dist/medias/action/ajouter_documents.php | 40 plugins-dist/medias/action/changer_mode_document.php | 20 plugins-dist/medias/action/copier_local.php | 18 plugins-dist/medias/action/desordonner_liens_documents.php | 27 plugins-dist/medias/action/dissocier_document.php | 29 plugins-dist/medias/action/editer_document.php | 56 plugins-dist/medias/action/ordonner_liens_documents.php | 20 plugins-dist/medias/action/supprimer_document.php | 19 plugins-dist/medias/action/supprimer_tous_orphelins.php | 28 plugins-dist/medias/action/tourner.php | 36 plugins-dist/medias/action/verifier_documents_brises.php | 17 plugins-dist/medias/action/verifier_documents_liens.php | 20 plugins-dist/medias/base/medias.php | 47 plugins-dist/medias/base/typedoc.php | 24 plugins-dist/medias/composer.json | 31 plugins-dist/medias/ecs.php | 11 plugins-dist/medias/formulaires/configurer_documents.php | 26 plugins-dist/medias/formulaires/editer_document.php | 25 plugins-dist/medias/formulaires/illustrer_document.php | 16 plugins-dist/medias/formulaires/joindre_document.php | 34 plugins-dist/medias/genie/medias_nettoyer_repertoire_upload.php | 7 plugins-dist/medias/inc/choisir_mode_document.php | 17 plugins-dist/medias/inc/determiner_statut_document.php | 20 plugins-dist/medias/inc/documenter_objet.php | 26 plugins-dist/medias/inc/documents.php | 26 plugins-dist/medias/inc/getdocument.php | 18 plugins-dist/medias/inc/joindre_document.php | 50 plugins-dist/medias/inc/marquer_doublons_doc.php | 24 plugins-dist/medias/inc/renseigner_document.php | 26 plugins-dist/medias/inc/verifier_document_mode_image.php | 16 plugins-dist/medias/inc/verifier_document_mode_vignette.php | 16 plugins-dist/medias/inc/verifier_taille_document_acceptable.php | 88 plugins-dist/medias/inc/vignette.php | 18 plugins-dist/medias/medias_administrations.php | 40 plugins-dist/medias/medias_autoriser.php | 43 plugins-dist/medias/medias_fonctions.php | 67 plugins-dist/medias/medias_pipelines.php | 37 plugins-dist/medias/metadata/audio.php | 2 plugins-dist/medias/metadata/html.php | 16 plugins-dist/medias/metadata/image.php | 16 plugins-dist/medias/metadata/mp4.php | 18 plugins-dist/medias/metadata/swf.php | 16 plugins-dist/medias/metadata/video.php | 2 plugins-dist/medias/modeles/document_case_fonctions.php | 20 plugins-dist/medias/modeles/document_desc_fonctions.php | 16 plugins-dist/medias/paquet.xml | 10 plugins-dist/medias/phpcs.xml.dist | 15 plugins-dist/medias/phpstan-baseline.neon | 2376 ---------- plugins-dist/medias/phpstan.neon.dist | 1 plugins-dist/medias/prive/squelettes/inclure/ajouter-documents_fonctions.php | 16 plugins-dist/medias/prive/squelettes/inclure/mediatheque-navigation_fonctions.php | 17 plugins-dist/medias/prive/vignettes/index.php | 4 plugins-dist/medias/puce_statut/document.php | 17 plugins-dist/medias/rector.php | 11 plugins-dist/medias/urls/generer_url_document.php | 17 plugins-dist/medias/urls/generer_url_ecrire_document.php | 5 plugins-dist/mots/.editorconfig | 12 plugins-dist/mots/.gitattributes | 5 plugins-dist/mots/.gitignore | 10 plugins-dist/mots/.gitlab-ci.yml | 71 plugins-dist/mots/CHANGELOG.md | 7 plugins-dist/mots/action/editer_groupe_mots.php | 47 plugins-dist/mots/action/editer_mot.php | 50 plugins-dist/mots/action/supprimer_groupe_mots.php | 19 plugins-dist/mots/action/supprimer_mot.php | 17 plugins-dist/mots/base/mots.php | 50 plugins-dist/mots/composer.json | 28 plugins-dist/mots/ecs.php | 11 plugins-dist/mots/formulaires/administrer_mot.php | 48 plugins-dist/mots/formulaires/configurer_mots.php | 25 plugins-dist/mots/formulaires/editer_groupe_mot.php | 28 plugins-dist/mots/formulaires/editer_mot.php | 29 plugins-dist/mots/inc/mots.php | 23 plugins-dist/mots/mots_administrations.php | 27 plugins-dist/mots/mots_autoriser.php | 62 plugins-dist/mots/mots_ieconfig.php | 4 plugins-dist/mots/mots_pipelines.php | 21 plugins-dist/mots/paquet.xml | 9 plugins-dist/mots/phpcs.xml.dist | 14 plugins-dist/mots/phpstan-baseline.neon | 674 -- plugins-dist/mots/phpstan.neon.dist | 1 plugins-dist/mots/prive/objets/infos/mot_fonctions.php | 19 plugins-dist/mots/prive/objets/liste/mots-admin_fonctions.php | 19 plugins-dist/mots/puce_statut/mot.php | 20 plugins-dist/mots/rector.php | 11 plugins-dist/plan/.editorconfig | 12 plugins-dist/plan/.gitattributes | 5 plugins-dist/plan/.gitignore | 10 plugins-dist/plan/.gitlab-ci.yml | 71 plugins-dist/plan/CHANGELOG.md | 4 plugins-dist/plan/LICENSE | 674 ++ plugins-dist/plan/action/deplacer_objets.php | 3 plugins-dist/plan/action/plan.php | 3 plugins-dist/plan/composer.json | 27 plugins-dist/plan/ecs.php | 11 plugins-dist/plan/paquet.xml | 9 plugins-dist/plan/phpcs.xml.dist | 15 plugins-dist/plan/phpstan-baseline.neon | 146 plugins-dist/plan/phpstan.neon.dist | 2 plugins-dist/plan/plan_fonctions.php | 25 plugins-dist/plan/rector.php | 11 plugins-dist/porte_plume/.editorconfig | 12 plugins-dist/porte_plume/.gitattributes | 5 plugins-dist/porte_plume/.gitignore | 10 plugins-dist/porte_plume/.gitlab-ci.yml | 71 plugins-dist/porte_plume/CHANGELOG.md | 6 plugins-dist/porte_plume/LICENSE | 674 ++ plugins-dist/porte_plume/barre_outils/edition.php | 164 plugins-dist/porte_plume/barre_outils/forum.php | 1 plugins-dist/porte_plume/barre_outils/vide.php | 1 plugins-dist/porte_plume/composer.json | 27 plugins-dist/porte_plume/ecs.php | 11 plugins-dist/porte_plume/javascript/porte_plume_start.js_fonctions.php | 2 plugins-dist/porte_plume/paquet.xml | 11 plugins-dist/porte_plume/phpcs.xml.dist | 15 plugins-dist/porte_plume/phpstan-baseline.neon | 175 plugins-dist/porte_plume/phpstan.neon.dist | 2 plugins-dist/porte_plume/porte_plume_fonctions.php | 48 plugins-dist/porte_plume/porte_plume_ieconfig.php | 4 plugins-dist/porte_plume/porte_plume_pipelines.php | 12 plugins-dist/porte_plume/prive/porte_plume_preview_fonctions.php | 3 plugins-dist/porte_plume/rector.php | 11 plugins-dist/porte_plume/tests/BarreOutilsMarkitupTest.php | 120 plugins-dist/revisions/.editorconfig | 12 plugins-dist/revisions/.gitattributes | 5 plugins-dist/revisions/.gitignore | 10 plugins-dist/revisions/.gitlab-ci.yml | 71 plugins-dist/revisions/CHANGELOG.md | 6 plugins-dist/revisions/LICENSE | 674 ++ plugins-dist/revisions/afficher_diff/champ.php | 20 plugins-dist/revisions/afficher_diff/id_rubrique.php | 18 plugins-dist/revisions/afficher_diff/jointure.php | 16 plugins-dist/revisions/base/revisions.php | 32 plugins-dist/revisions/composer.json | 27 plugins-dist/revisions/ecs.php | 11 plugins-dist/revisions/formulaires/configurer_revisions_objets.php | 17 plugins-dist/revisions/formulaires/reviser.php | 16 plugins-dist/revisions/genie/optimiser_revisions.php | 16 plugins-dist/revisions/genie/revisions_optimiser_revisions.php | 19 plugins-dist/revisions/inc/diff.php | 63 plugins-dist/revisions/inc/revisions.php | 72 plugins-dist/revisions/inc/suivi_versions.php | 19 plugins-dist/revisions/paquet.xml | 9 plugins-dist/revisions/phpcs.xml.dist | 14 plugins-dist/revisions/phpstan-baseline.neon | 726 --- plugins-dist/revisions/prive/objets/contenu/revision_fonctions.php | 11 plugins-dist/revisions/prive/transmettre/rss/revisions_fonctions.php | 16 plugins-dist/revisions/rector.php | 11 plugins-dist/revisions/revisions_administrations.php | 37 plugins-dist/revisions/revisions_autoriser.php | 23 plugins-dist/revisions/revisions_ieconfig.php | 4 plugins-dist/revisions/revisions_pipeline.php | 44 plugins-dist/safehtml/.editorconfig | 12 plugins-dist/safehtml/.gitattributes | 5 plugins-dist/safehtml/.gitignore | 10 plugins-dist/safehtml/.gitlab-ci.yml | 71 plugins-dist/safehtml/CHANGELOG.md | 6 plugins-dist/safehtml/LICENSE | 674 ++ plugins-dist/safehtml/composer.json | 19 plugins-dist/safehtml/ecs.php | 11 plugins-dist/safehtml/inc/HTMLPurifier.extended.php | 14 plugins-dist/safehtml/inc/safehtml.php | 21 plugins-dist/safehtml/paquet.xml | 9 plugins-dist/safehtml/phpcs.xml.dist | 16 plugins-dist/safehtml/phpstan-baseline.neon | 102 plugins-dist/safehtml/phpstan.neon.dist | 3 plugins-dist/safehtml/rector.php | 11 plugins-dist/safehtml/sanitizer/svg.php | 23 plugins-dist/safehtml/src/Texte/Collecteur/MetasMicroData.php | 39 plugins-dist/safehtml/tests/SafeHtmlTest.php | 259 - plugins-dist/sites/.editorconfig | 12 plugins-dist/sites/.gitattributes | 5 plugins-dist/sites/.gitignore | 10 plugins-dist/sites/.gitlab-ci.yml | 71 plugins-dist/sites/CHANGELOG.md | 14 plugins-dist/sites/LICENSE | 674 ++ plugins-dist/sites/action/editer_site.php | 48 plugins-dist/sites/action/exporter_bookmarks.php | 18 plugins-dist/sites/action/importer_bookmarks_netscape.php | 28 plugins-dist/sites/action/importer_bookmarks_opml.php | 22 plugins-dist/sites/action/instituer_syndic_article.php | 16 plugins-dist/sites/action/purger_site.php | 18 plugins-dist/sites/action/syndiquer_site.php | 19 plugins-dist/sites/balise/formulaire_site.php | 25 plugins-dist/sites/base/sites.php | 39 plugins-dist/sites/composer.json | 28 plugins-dist/sites/ecs.php | 11 plugins-dist/sites/formulaires/configurer_sites.php | 32 plugins-dist/sites/formulaires/editer_site.php | 22 plugins-dist/sites/formulaires/editer_site_fonctions.php | 16 plugins-dist/sites/formulaires/exporter_sites.php | 16 plugins-dist/sites/formulaires/importer_sites.php | 18 plugins-dist/sites/formulaires/regler_moderation_site.php | 25 plugins-dist/sites/formulaires/site.php | 40 plugins-dist/sites/genie/syndic.php | 49 plugins-dist/sites/inc/feedfinder.php | 39 plugins-dist/sites/inc/site.php | 21 plugins-dist/sites/inc/syndic.php | 18 plugins-dist/sites/liens/implicite_site.php | 16 plugins-dist/sites/paquet.xml | 9 plugins-dist/sites/phpcs.xml.dist | 15 plugins-dist/sites/phpstan-baseline.neon | 1054 ---- plugins-dist/sites/phpstan.neon.dist | 3 plugins-dist/sites/prive/objets/liste/syndic_articles_fonctions.php | 16 plugins-dist/sites/puce_statut/site.php | 17 plugins-dist/sites/rector.php | 11 plugins-dist/sites/sites_administrations.php | 19 plugins-dist/sites/sites_autoriser.php | 55 plugins-dist/sites/sites_fonctions.php | 27 plugins-dist/sites/sites_pipelines.php | 52 plugins-dist/sites/syndic/atomrss.php | 54 plugins-dist/sites/tests/SyndicationTest.php | 96 plugins-dist/statistiques/.editorconfig | 12 plugins-dist/statistiques/.gitattributes | 5 plugins-dist/statistiques/.gitignore | 10 plugins-dist/statistiques/.gitlab-ci.yml | 71 plugins-dist/statistiques/CHANGELOG.md | 8 plugins-dist/statistiques/LICENSE | 674 ++ plugins-dist/statistiques/action/statistiques_archiver.php | 58 plugins-dist/statistiques/base/delete_referers.php | 18 plugins-dist/statistiques/base/delete_stats.php | 22 plugins-dist/statistiques/base/stats.php | 43 plugins-dist/statistiques/composer.json | 19 plugins-dist/statistiques/ecs.php | 11 plugins-dist/statistiques/exec/base_delete_referers.php | 16 plugins-dist/statistiques/exec/base_delete_stats.php | 17 plugins-dist/statistiques/formulaires/configurer_compteur.php | 16 plugins-dist/statistiques/genie/popularites.php | 35 plugins-dist/statistiques/genie/visites.php | 51 plugins-dist/statistiques/inc/referenceurs.php | 24 plugins-dist/statistiques/inc/statistiques.php | 16 plugins-dist/statistiques/inc/stats_referers_to_array.php | 22 plugins-dist/statistiques/inc/stats_visites_to_array.php | 21 plugins-dist/statistiques/paquet.xml | 9 plugins-dist/statistiques/phpcs.xml.dist | 15 plugins-dist/statistiques/phpstan-baseline.neon | 816 --- plugins-dist/statistiques/phpstan.neon.dist | 1 plugins-dist/statistiques/prive/squelettes/contenu/stats_lang_fonctions.php | 16 plugins-dist/statistiques/prive/squelettes/contenu/stats_repartition_fonctions.php | 26 plugins-dist/statistiques/prive/squelettes/inclure/stats-visites-data_fonctions.php | 2 plugins-dist/statistiques/public/stats.php | 24 plugins-dist/statistiques/rector.php | 11 plugins-dist/statistiques/stats_administrations.php | 28 plugins-dist/statistiques/stats_autoriser.php | 18 plugins-dist/statistiques/stats_ieconfig.php | 4 plugins-dist/statistiques/stats_pipelines.php | 20 plugins-dist/svp/.editorconfig | 12 plugins-dist/svp/.gitattributes | 5 plugins-dist/svp/.gitignore | 10 plugins-dist/svp/.gitlab-ci.yml | 71 plugins-dist/svp/CHANGELOG.md | 7 plugins-dist/svp/LICENSE | 674 ++ plugins-dist/svp/action/actionner.php | 10 plugins-dist/svp/action/editer_depot.php | 29 plugins-dist/svp/action/supprimer_depot.php | 1 plugins-dist/svp/action/teleporter.php | 8 plugins-dist/svp/base/svp_declarer.php | 25 plugins-dist/svp/composer.json | 30 plugins-dist/svp/ecs.php | 11 plugins-dist/svp/exec/admin_plugin.php | 59 plugins-dist/svp/formulaires/admin_plugin.php | 6 plugins-dist/svp/formulaires/ajouter_depot.php | 25 plugins-dist/svp/formulaires/charger_plugin.php | 10 plugins-dist/svp/formulaires/charger_plugin_archive.php | 16 plugins-dist/svp/formulaires/editer_depot.php | 8 plugins-dist/svp/formulaires/inc-admin_plugin_fonctions.php | 2 plugins-dist/svp/genie/svp_taches_generales_cron.php | 2 plugins-dist/svp/inc/svp_actionner.php | 140 plugins-dist/svp/inc/svp_decider.php | 72 plugins-dist/svp/inc/svp_depoter_distant.php | 65 plugins-dist/svp/inc/svp_depoter_local.php | 52 plugins-dist/svp/inc/svp_outiller.php | 53 plugins-dist/svp/inc/svp_phraser.php | 26 plugins-dist/svp/inc/svp_plugin.php | 2 plugins-dist/svp/inc/svp_rechercher.php | 10 plugins-dist/svp/inc/where_compatible_spip.php | 2 plugins-dist/svp/paquet.xml | 7 plugins-dist/svp/phpcs.xml.dist | 15 plugins-dist/svp/phpstan-baseline.neon | 1638 ------ plugins-dist/svp/phpstan.neon.dist | 1 plugins-dist/svp/plugins/fusion_paquet.php | 3 plugins-dist/svp/plugins/fusion_plugin.php | 2 plugins-dist/svp/plugins/infos_plugin.php | 19 plugins-dist/svp/plugins/preparer_sql_paquet.php | 9 plugins-dist/svp/plugins/preparer_sql_plugin.php | 12 plugins-dist/svp/prive/squelettes/navigation/svp_admin_plugin_fonctions.php | 2 plugins-dist/svp/rector.php | 11 plugins-dist/svp/svp_administrations.php | 21 plugins-dist/svp/svp_fonctions.php | 45 plugins-dist/svp/svp_ieconfig.php | 4 plugins-dist/svp/svp_pipelines.php | 37 plugins-dist/svp/teleporter/git.php | 9 plugins-dist/svp/teleporter/http.php | 4 plugins-dist/svp/teleporter/http_deballe_tgz.php | 5 plugins-dist/svp/teleporter/http_deballe_zip.php | 5 plugins-dist/svp/teleporter/svn.php | 7 plugins-dist/textwheel/.editorconfig | 12 plugins-dist/textwheel/.gitattributes | 5 plugins-dist/textwheel/.gitignore | 10 plugins-dist/textwheel/.gitlab-ci.yml | 71 plugins-dist/textwheel/CHANGELOG.md | 15 plugins-dist/textwheel/LICENSE | 674 ++ plugins-dist/textwheel/composer.json | 28 plugins-dist/textwheel/ecs.php | 11 plugins-dist/textwheel/engine/textwheel.php | 128 plugins-dist/textwheel/engine/textwheelrule.php | 36 plugins-dist/textwheel/engine/textwheelruleset.php | 20 plugins-dist/textwheel/inc/autoliens.php | 4 plugins-dist/textwheel/inc/lien.php | 52 plugins-dist/textwheel/inc/notes.php | 33 plugins-dist/textwheel/inc/ressource.php | 5 plugins-dist/textwheel/inc/texte.php | 139 plugins-dist/textwheel/inc/textwheel.php | 33 plugins-dist/textwheel/paquet.xml | 10 plugins-dist/textwheel/phpcs.xml.dist | 15 plugins-dist/textwheel/phpstan-baseline.neon | 486 -- plugins-dist/textwheel/phpstan.neon.dist | 2 plugins-dist/textwheel/rector.php | 11 plugins-dist/textwheel/tests/AutoliensTest.php | 9 plugins-dist/textwheel/tests/TextwheelNettoyerraccourcistypoTest.php | 94 plugins-dist/textwheel/tests/TextwheelPropreTest.php | 36 plugins-dist/textwheel/tests/TextwheelPropreTypoTest.php | 30 plugins-dist/textwheel/typographie/en.php | 18 plugins-dist/textwheel/typographie/fr.php | 18 plugins-dist/textwheel/wheels/spip/backticks.php | 17 plugins-dist/textwheel/wheels/spip/echappe-js.php | 8 plugins-dist/textwheel/wheels/spip/spip-listes.php | 2 plugins-dist/textwheel/wheels/spip/spip-paragrapher.php | 9 plugins-dist/textwheel/wheels/spip/spip.php | 2 plugins-dist/urls_etendues/.editorconfig | 12 plugins-dist/urls_etendues/.gitattributes | 5 plugins-dist/urls_etendues/.gitignore | 10 plugins-dist/urls_etendues/.gitlab-ci.yml | 71 plugins-dist/urls_etendues/CHANGELOG.md | 6 plugins-dist/urls_etendues/action/editer_url.php | 41 plugins-dist/urls_etendues/action/supprimer_url.php | 18 plugins-dist/urls_etendues/action/urls_actualiser.php | 20 plugins-dist/urls_etendues/base/urls.php | 19 plugins-dist/urls_etendues/composer.json | 25 plugins-dist/urls_etendues/ecs.php | 11 plugins-dist/urls_etendues/formulaires/configurer_urls.php | 23 plugins-dist/urls_etendues/formulaires/editer_url_objet.php | 24 plugins-dist/urls_etendues/paquet.xml | 9 plugins-dist/urls_etendues/phpcs.xml.dist | 14 plugins-dist/urls_etendues/phpstan-baseline.neon | 679 -- plugins-dist/urls_etendues/phpstan.neon.dist | 1 plugins-dist/urls_etendues/rector.php | 11 plugins-dist/urls_etendues/urls/arbo.php | 73 plugins-dist/urls_etendues/urls/html.php | 59 plugins-dist/urls_etendues/urls/libres.php | 26 plugins-dist/urls_etendues/urls/propres.php | 72 plugins-dist/urls_etendues/urls/propres2.php | 24 plugins-dist/urls_etendues/urls/propres_qs.php | 43 plugins-dist/urls_etendues/urls/simple.php | 31 plugins-dist/urls_etendues/urls_administrations.php | 16 plugins-dist/urls_etendues/urls_autoriser.php | 22 plugins-dist/urls_etendues/urls_fonctions.php | 16 plugins-dist/urls_etendues/urls_pipeline.php | 24 prive/CHANGELOG.md | 24 prive/formulaires/configurer_preferences_menus.php | 4 prive/formulaires/dateur/inc-dateur.html | 4 prive/formulaires/editer_liens.php | 10 prive/formulaires/mot_de_passe.php | 6 prive/objets/liste/visiteurs.html | 4 prive/squelettes/contenu/job_queue.html | 3 prive/squelettes/inclure/menu-navigation.html | 2 prive/squelettes/navigation/job_queue.html | 4 prive/themes/spip/content.css | 12 prive/themes/spip/picker.css.html | 2 vendor/composer/installed.json | 112 vendor/composer/installed.php | 60 vendor/symfony/polyfill-mbstring/Mbstring.php | 145 vendor/symfony/polyfill-mbstring/bootstrap.php | 157 vendor/symfony/polyfill-mbstring/bootstrap72.php | 173 vendor/symfony/polyfill-mbstring/bootstrap80.php | 14 vendor/symfony/polyfill-php81/bootstrap.php | 4 vendor/symfony/polyfill-php82/bootstrap.php | 4 vendor/symfony/polyfill-php83/Php83.php | 57 vendor/symfony/polyfill-php83/bootstrap.php | 12 vendor/symfony/polyfill-php83/bootstrap72.php | 25 vendor/symfony/polyfill-php83/bootstrap80.php | 30 vendor/symfony/polyfill-php83/bootstrap81.php | 20 vendor/symfony/polyfill-php84/Php84.php | 6 vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Mysql.php | 41 vendor/symfony/polyfill-php84/Resources/stubs/ReflectionConstant.php | 1 vendor/symfony/polyfill-php84/bootstrap.php | 36 vendor/symfony/polyfill-php84/bootstrap72.php | 39 vendor/symfony/polyfill-php84/bootstrap80.php | 57 vendor/symfony/polyfill-php85/Php85.php | 4 vendor/symfony/polyfill-php85/bootstrap.php | 6 687 files changed, 17626 insertions(+), 19114 deletions(-) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp473e2q3p/spip_4.4.15+dfsg-0+deb13u1.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp473e2q3p/spip_4.4.19+dfsg-0+deb13u1.dsc: no acceptable signature found diff -Nru spip-4.4.15+dfsg/CHANGELOG.md spip-4.4.19+dfsg/CHANGELOG.md --- spip-4.4.15+dfsg/CHANGELOG.md 2026-05-22 07:52:14.000000000 +0000 +++ spip-4.4.19+dfsg/CHANGELOG.md 2026-08-12 09:21:38.000000000 +0000 @@ -1,5 +1,24 @@ # Changelog +## 4.4.19 - 2026-08-12 + +- Mise à jour des dépendances (ecrire, prive, dump, images) + +## 4.4.18 - 2026-08-10 + +- Mise à jour des dépendances (ecrire) + +## 4.4.17 - 2026-08-10 + +- Mise à jour des dépendances (ecrire, prive et plugins-dist) + +## 4.4.16 - 2026-07-06 + +### Security + +- Mise à jour des dépendances (ecrire, prive, bigup, images, tw) +- spip-security/securite#4880 interdire l'accès aux fichiers PHP dans IMG et local (htaccess.txt) + ## 4.4.15 - 2026-05-22 - Mise à jour des dépendances (ecrire, dump) diff -Nru spip-4.4.15+dfsg/composer.lock spip-4.4.19+dfsg/composer.lock --- spip-4.4.15+dfsg/composer.lock 2026-05-22 07:52:14.000000000 +0000 +++ spip-4.4.19+dfsg/composer.lock 2026-08-12 09:21:38.000000000 +0000 @@ -317,16 +317,16 @@ }, { "name": "spip/ecrire", - "version": "4.4.15", + "version": "4.4.19", "source": { "type": "git", "url": "https://git.spip.net/spip/ecrire.git", - "reference": "82e4cf75da354af62907361b309dc0280f416d98" + "reference": "caf95af25a70cfa37bc6e2c34dac30adc9037203" }, "dist": { "type": "zip", - "url": "https://git.spip.net/api/v4/projects/spip%2Fecrire/repository/archive.zip?sha=82e4cf75da354af62907361b309dc0280f416d98", - "reference": "82e4cf75da354af62907361b309dc0280f416d98", + "url": "https://git.spip.net/api/v4/projects/spip%2Fecrire/repository/archive.zip?sha=caf95af25a70cfa37bc6e2c34dac30adc9037203", + "reference": "caf95af25a70cfa37bc6e2c34dac30adc9037203", "shasum": "" }, "require": { @@ -362,23 +362,23 @@ ], "description": "Noyau de SPIP", "support": { - "source": "https://git.spip.net/spip/ecrire/-/tree/4.4.15", + "source": "https://git.spip.net/spip/ecrire/-/tree/4.4.19", "issues": "https://git.spip.net/spip/ecrire/-/issues" }, - "time": "2026-05-22T09:44:50+02:00" + "time": "2026-08-12T11:18:10+02:00" }, { "name": "spip/prive", - "version": "1.1.0", + "version": "1.1.3", "source": { "type": "git", "url": "https://git.spip.net/spip/prive.git", - "reference": "32d29f8250d47609d30c081571295bc075062a6a" + "reference": "7679959803b8e40ae029a15f757c4ae171802cae" }, "dist": { "type": "zip", - "url": "https://git.spip.net/api/v4/projects/spip%2Fprive/repository/archive.zip?sha=32d29f8250d47609d30c081571295bc075062a6a", - "reference": "32d29f8250d47609d30c081571295bc075062a6a", + "url": "https://git.spip.net/api/v4/projects/spip%2Fprive/repository/archive.zip?sha=7679959803b8e40ae029a15f757c4ae171802cae", + "reference": "7679959803b8e40ae029a15f757c4ae171802cae", "shasum": "" }, "require-dev": { @@ -390,10 +390,10 @@ ], "description": "Squelettes de l'espace privé", "support": { - "source": "https://git.spip.net/spip/prive/-/tree/1.1.0", + "source": "https://git.spip.net/spip/prive/-/tree/1.1.3", "issues": "https://git.spip.net/spip/prive/-/issues" }, - "time": "2026-05-12T09:51:22+02:00" + "time": "2026-08-12T11:11:37+02:00" }, { "name": "spip/security", @@ -745,16 +745,16 @@ }, { "name": "symfony/polyfill-mbstring", - "version": "v1.37.0", + "version": "v1.38.2", "source": { "type": "git", "url": "https://github.com/symfony/polyfill-mbstring.git", - "reference": "6a21eb99c6973357967f6ce3708cd55a6bec6315" + "reference": "d3d318bad5e7a1bfbd026009c8bfb8d8f99ae6b6" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/6a21eb99c6973357967f6ce3708cd55a6bec6315", - "reference": "6a21eb99c6973357967f6ce3708cd55a6bec6315", + "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/d3d318bad5e7a1bfbd026009c8bfb8d8f99ae6b6", + "reference": "d3d318bad5e7a1bfbd026009c8bfb8d8f99ae6b6", "shasum": "" }, "require": { @@ -806,7 +806,7 @@ "shim" ], "support": { - "source": "https://github.com/symfony/polyfill-mbstring/tree/v1.37.0" + "source": "https://github.com/symfony/polyfill-mbstring/tree/v1.38.2" }, "funding": [ { @@ -826,7 +826,7 @@ "type": "tidelift" } ], - "time": "2026-04-10T17:25:58+00:00" + "time": "2026-05-27T06:59:30+00:00" }, { "name": "symfony/polyfill-php80", @@ -914,16 +914,16 @@ }, { "name": "symfony/polyfill-php81", - "version": "v1.37.0", + "version": "v1.38.1", "source": { "type": "git", "url": "https://github.com/symfony/polyfill-php81.git", - "reference": "4a4cfc2d253c21a5ad0e53071df248ed48c6ce5c" + "reference": "6bfb9c766cacffbc8e118cb87217d08ed84e5cd7" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/polyfill-php81/zipball/4a4cfc2d253c21a5ad0e53071df248ed48c6ce5c", - "reference": "4a4cfc2d253c21a5ad0e53071df248ed48c6ce5c", + "url": "https://api.github.com/repos/symfony/polyfill-php81/zipball/6bfb9c766cacffbc8e118cb87217d08ed84e5cd7", + "reference": "6bfb9c766cacffbc8e118cb87217d08ed84e5cd7", "shasum": "" }, "require": { @@ -970,7 +970,7 @@ "shim" ], "support": { - "source": "https://github.com/symfony/polyfill-php81/tree/v1.37.0" + "source": "https://github.com/symfony/polyfill-php81/tree/v1.38.1" }, "funding": [ { @@ -990,20 +990,20 @@ "type": "tidelift" } ], - "time": "2024-09-09T11:45:10+00:00" + "time": "2026-05-26T12:45:58+00:00" }, { "name": "symfony/polyfill-php82", - "version": "v1.37.0", + "version": "v1.38.1", "source": { "type": "git", "url": "https://github.com/symfony/polyfill-php82.git", - "reference": "34808efe3e68f69685796f7c253a2f1d8ea9df59" + "reference": "002dc0cfe5fd4ed6033d48f27d4f19a486c4b04b" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/polyfill-php82/zipball/34808efe3e68f69685796f7c253a2f1d8ea9df59", - "reference": "34808efe3e68f69685796f7c253a2f1d8ea9df59", + "url": "https://api.github.com/repos/symfony/polyfill-php82/zipball/002dc0cfe5fd4ed6033d48f27d4f19a486c4b04b", + "reference": "002dc0cfe5fd4ed6033d48f27d4f19a486c4b04b", "shasum": "" }, "require": { @@ -1050,7 +1050,7 @@ "shim" ], "support": { - "source": "https://github.com/symfony/polyfill-php82/tree/v1.37.0" + "source": "https://github.com/symfony/polyfill-php82/tree/v1.38.1" }, "funding": [ { @@ -1070,20 +1070,20 @@ "type": "tidelift" } ], - "time": "2026-04-10T16:19:22+00:00" + "time": "2026-05-26T12:45:58+00:00" }, { "name": "symfony/polyfill-php83", - "version": "v1.37.0", + "version": "v1.41.0", "source": { "type": "git", "url": "https://github.com/symfony/polyfill-php83.git", - "reference": "3600c2cb22399e25bb226e4a135ce91eeb2a6149" + "reference": "5ea99087fb99c273a9b9236ed4c31e78b16103c6" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/polyfill-php83/zipball/3600c2cb22399e25bb226e4a135ce91eeb2a6149", - "reference": "3600c2cb22399e25bb226e4a135ce91eeb2a6149", + "url": "https://api.github.com/repos/symfony/polyfill-php83/zipball/5ea99087fb99c273a9b9236ed4c31e78b16103c6", + "reference": "5ea99087fb99c273a9b9236ed4c31e78b16103c6", "shasum": "" }, "require": { @@ -1130,7 +1130,7 @@ "shim" ], "support": { - "source": "https://github.com/symfony/polyfill-php83/tree/v1.37.0" + "source": "https://github.com/symfony/polyfill-php83/tree/v1.41.0" }, "funding": [ { @@ -1150,20 +1150,20 @@ "type": "tidelift" } ], - "time": "2026-04-10T17:25:58+00:00" + "time": "2026-07-01T12:47:55+00:00" }, { "name": "symfony/polyfill-php84", - "version": "v1.37.0", + "version": "v1.38.1", "source": { "type": "git", "url": "https://github.com/symfony/polyfill-php84.git", - "reference": "88486db2c389b290bf87ff1de7ebc1e13e42bb06" + "reference": "f4e1dfaee5b74aba5964fe1fd4dfc7ba5e3085fa" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/polyfill-php84/zipball/88486db2c389b290bf87ff1de7ebc1e13e42bb06", - "reference": "88486db2c389b290bf87ff1de7ebc1e13e42bb06", + "url": "https://api.github.com/repos/symfony/polyfill-php84/zipball/f4e1dfaee5b74aba5964fe1fd4dfc7ba5e3085fa", + "reference": "f4e1dfaee5b74aba5964fe1fd4dfc7ba5e3085fa", "shasum": "" }, "require": { @@ -1210,7 +1210,7 @@ "shim" ], "support": { - "source": "https://github.com/symfony/polyfill-php84/tree/v1.37.0" + "source": "https://github.com/symfony/polyfill-php84/tree/v1.38.1" }, "funding": [ { @@ -1230,20 +1230,20 @@ "type": "tidelift" } ], - "time": "2026-04-10T18:47:49+00:00" + "time": "2026-05-26T12:51:13+00:00" }, { "name": "symfony/polyfill-php85", - "version": "v1.37.0", + "version": "v1.41.0", "source": { "type": "git", "url": "https://github.com/symfony/polyfill-php85.git", - "reference": "fcfa4973a9917cef23f2e38774da74a2b7d115ee" + "reference": "255fab485aaa1006ed411040c42aecd7b5302d7a" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/symfony/polyfill-php85/zipball/fcfa4973a9917cef23f2e38774da74a2b7d115ee", - "reference": "fcfa4973a9917cef23f2e38774da74a2b7d115ee", + "url": "https://api.github.com/repos/symfony/polyfill-php85/zipball/255fab485aaa1006ed411040c42aecd7b5302d7a", + "reference": "255fab485aaa1006ed411040c42aecd7b5302d7a", "shasum": "" }, "require": { @@ -1290,7 +1290,7 @@ "shim" ], "support": { - "source": "https://github.com/symfony/polyfill-php85/tree/v1.37.0" + "source": "https://github.com/symfony/polyfill-php85/tree/v1.41.0" }, "funding": [ { @@ -1310,7 +1310,7 @@ "type": "tidelift" } ], - "time": "2026-04-26T13:10:57+00:00" + "time": "2026-07-01T12:47:55+00:00" }, { "name": "symfony/service-contracts", diff -Nru spip-4.4.15+dfsg/debian/changelog spip-4.4.19+dfsg/debian/changelog --- spip-4.4.15+dfsg/debian/changelog 2026-05-23 14:49:01.000000000 +0000 +++ spip-4.4.19+dfsg/debian/changelog 2026-08-12 11:45:16.000000000 +0000 @@ -1,7 +1,30 @@ -spip (4.4.15+dfsg-0+deb13u1) trixie-security; urgency=medium +spip (4.4.19+dfsg-0+deb13u1) trixie-security; urgency=medium + + [ Matthieu Marcillaud ] + * build: up dependencies + * build: Version 4.4.19 + + Fix code injection [CVE-2026-66738] [ David Prévot ] - * Document CVE in previouss changelog entry + * Don’t install ecs, rector nor phplint files + + -- David Prévot Wed, 12 Aug 2026 13:45:16 +0200 + +spip (4.4.16+dfsg-0+deb13u1) trixie; urgency=medium + + [ b_b ] + * security: interdire l'accès aux fichiers PHP dans IMG et local + + [ Matthieu Marcillaud ] + * build: up dependencies + * build: Version 4.4.16 + + [ David Prévot ] + * Document CVE in previous changelog entry + + -- David Prévot Thu, 09 Jul 2026 13:55:48 +0200 + +spip (4.4.15+dfsg-0+deb13u1) trixie-security; urgency=medium [ Matthieu Marcillaud ] * build: Ajout du polyfill PHP 8.5 @@ -11,6 +34,11 @@ [CVE-2026-8429] + Fix remote code execution vulnerability in the public space that is limited to certain nginx configurations [CVE-2026-8430] + + Fix open redirect vulnerability from action/cookie.php in ecrire + [CVE-2026-48832] + + [ David Prévot ] + * Document CVE in previous changelog entry -- David Prévot Sat, 23 May 2026 16:49:01 +0200 diff -Nru spip-4.4.15+dfsg/debian/patches/0001-Fix-created-directories-and-files-default-rights.patch spip-4.4.19+dfsg/debian/patches/0001-Fix-created-directories-and-files-default-rights.patch --- spip-4.4.15+dfsg/debian/patches/0001-Fix-created-directories-and-files-default-rights.patch 2026-05-23 14:47:54.000000000 +0000 +++ spip-4.4.19+dfsg/debian/patches/0001-Fix-created-directories-and-files-default-rights.patch 2026-08-12 11:45:16.000000000 +0000 @@ -13,7 +13,7 @@ 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ecrire/inc_version.php b/ecrire/inc_version.php -index 80d046f..d4b8f6d 100644 +index 461e78e..68b3f3e 100644 --- a/ecrire/inc_version.php +++ b/ecrire/inc_version.php @@ -445,7 +445,7 @@ $liste_des_authentifications = [ diff -Nru spip-4.4.15+dfsg/debian/patches/0003-Fix-displayed-version-in-the-private-interface.patch spip-4.4.19+dfsg/debian/patches/0003-Fix-displayed-version-in-the-private-interface.patch --- spip-4.4.15+dfsg/debian/patches/0003-Fix-displayed-version-in-the-private-interface.patch 2026-05-23 14:47:54.000000000 +0000 +++ spip-4.4.19+dfsg/debian/patches/0003-Fix-displayed-version-in-the-private-interface.patch 2026-08-12 11:45:16.000000000 +0000 @@ -14,7 +14,7 @@ 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ecrire/inc_version.php b/ecrire/inc_version.php -index d4b8f6d..565e7c2 100644 +index 68b3f3e..2ec4296 100644 --- a/ecrire/inc_version.php +++ b/ecrire/inc_version.php @@ -470,7 +470,7 @@ $spip_sql_version = 1; diff -Nru spip-4.4.15+dfsg/debian/patches/0004-Use-getid3-class-from-the-php-getid3-package.patch spip-4.4.19+dfsg/debian/patches/0004-Use-getid3-class-from-the-php-getid3-package.patch --- spip-4.4.15+dfsg/debian/patches/0004-Use-getid3-class-from-the-php-getid3-package.patch 2026-05-23 14:34:58.000000000 +0000 +++ spip-4.4.19+dfsg/debian/patches/0004-Use-getid3-class-from-the-php-getid3-package.patch 2026-08-12 11:45:16.000000000 +0000 @@ -7,7 +7,7 @@ 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins-dist/medias/metadata/video.php b/plugins-dist/medias/metadata/video.php -index 0f4683b..afe6760 100644 +index 9963724..d67b59f 100644 --- a/plugins-dist/medias/metadata/video.php +++ b/plugins-dist/medias/metadata/video.php @@ -27,7 +27,7 @@ if (!defined('_ECRIRE_INC_VERSION')) { diff -Nru spip-4.4.15+dfsg/debian/rules spip-4.4.19+dfsg/debian/rules --- spip-4.4.15+dfsg/debian/rules 2026-05-23 14:36:57.000000000 +0000 +++ spip-4.4.19+dfsg/debian/rules 2026-08-12 11:45:16.000000000 +0000 @@ -32,6 +32,7 @@ -X.vscode \ -Xcomposer.json \ -XCOPYING \ + -Xecs.php \ -Xgetid3 \ -XLICEN \ -Xlicense.txt \ @@ -40,10 +41,12 @@ -Xmutualisation/outils \ -XNEWS \ -Xphpcs \ + -Xphplint \ -Xphpstan \ -Xphpunit \ -XREADME \ -Xreadme \ + -Xrector.php \ -Xsvg-scanner.php \ -Xsynchronisons.ksh \ -Xtests \ diff -Nru spip-4.4.15+dfsg/ecrire/CHANGELOG.md spip-4.4.19+dfsg/ecrire/CHANGELOG.md --- spip-4.4.15+dfsg/ecrire/CHANGELOG.md 2026-05-22 07:44:50.000000000 +0000 +++ spip-4.4.19+dfsg/ecrire/CHANGELOG.md 2026-08-12 09:18:10.000000000 +0000 @@ -2,6 +2,60 @@ Changelog de SPIP 4.4 +## 4.4.19 - 2026-08-12 + +### Fixed + +- si pas de meta version_installee déclencher un upgrade à partir d'une version arbitraire +- ne pas timeout sur l'update des signature de jobs +- #162 s'assurer que autoriser() et bien chargé +- #160 le bon niveau de log (et la bonne constante) + +## 4.4.18 - 2026-08-10 + +### Fixed + +- spip-security/securite#4888 Correction de cas d’usages avec des boucles DATA (depuis SPIP 4.4.17) + +### Security + +- spip-security/securite#4888 sql_serveur spécifique des boucles DATA uniquement dans le calcul des critères +- spip-security/securite#4898 transmettre un sql_serveur à tous les appels de kwote + +## 4.4.17 - 2026-08-10 + +### Added + +- spip-security/securite#4895 Signature sur les jobs +- spip-security/securite#4891 ajout de SpipCles::secret_des_actions() +- Ajout de la méthode remplacer() pour les collecteurs (AbstractCollecteur) +- spip-contrib-extensions/multidomaines!24 #144 Ajout d'un pipeline qui permet d'informer les plugins d'une déconnexion +- spip-security/securite#4897 recuperer_url supporte une option callback_valider_url + +### Fixed + +- |chercher_rubrique{} appelé avec actionable=1 est déprécié, poste vers l'action 'instituer_parent_objet' et vérifie l'autorisation d'instituer +- #138 distant_trouver_extension_selon_headers() prefere l'extension de l'URL +- Changement de méthode par recuperer_url en cas de 301/302/303 +- #157 supprimer les `