[Pkg-mediawiki-devel] Bug#685326: Anchient version in stable and testing although update to more recent version requested for ages.

[Benny Baumann]

Package: php-geshi
Version: 1.0.8.4-1
Severity: serious
Tags: upstream

Despite being asked for about two years ago this package hasn't been updated
by the responsible maintainers. Also direct contact to the maintainers at several
points in time and occasions achieved no response which would lead to new
and fixed versions of the upstream package resolving all bugs of this
Debian package being updated.

Also in the latest upstream release there are fixes for two security bugs (reported
to the security team) that need being deployed ASAP a the Debian package includes
the vulnerable files.

Even though just fixing those two security bugs might seem enough it actually isn't.
Due to the wide range of web applications that include GeSHi or contain a plugin to
use GeSHi fixing the three below bugs causes a lot of applications to profit from
including a new upstream version. This not only fixes a few bugs reported to Debian
directly but (maybe read the CHANGELOG) quite a lot of different highlighting problems
people have reported upstream over the last two years.

Thus it'd be /really/ nice if a updated version using latest upstream 1.0.8.11 by the
time of this bug report) could be sent to stable/testing ASAP.

Best regards,
upstream.

Bugs with severity normal
  1) #579080  php-geshi: Can't render Scheme code
  2) #613711  php-geshi: Incorrect HTML generation while parsing Java source files

Bugs with severity wishlist
  3) #584251  php-geshi: Upstream release 1.0.8.8

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages php-geshi depends on:
ii  php5      5.4.4-4
ii  php5-cli  5.4.4-4

php-geshi recommends no packages.

php-geshi suggests no packages.

-- no debconf information