BlueSpice Helpdesk - Recent changes [en]

Reference:BlueSpiceExtendedStatistics

Margit.link-rodrigue — Fri, 31 Jul 2026 14:54:58 GMT

← Older revision		Revision as of 14:54, 31 July 2026
Line 1:		Line 1:
	{{BSExtensionInfo		{{BSExtensionInfo
			\|removed=No
	\|status=stable		\|status=stable
	\|developer=HalloWelt		\|developer=HalloWelt
	\|type=BlueSpice		\|type=BlueSpice
	\|edition=~~BlueSpice pro,~~ BlueSpice free (deactivated), BlueSpice farm, BlueSpice cloud		\|edition=BlueSpice free (deactivated), BlueSpice pro, BlueSpice farm, BlueSpice cloud
	\|compatible=BlueSpice		\|compatible=BlueSpice
	\|category=Reporting		\|category=Reporting
	~~\|license=GPL v3 only~~
	\|features='''ExtendedStatistics''' provides an analytic view of many relevant parameters on the wiki, providing wiki administrators better insight into the usage of the wiki.		\|features='''ExtendedStatistics''' provides an analytic view of many relevant parameters on the wiki, providing wiki administrators better insight into the usage of the wiki.

	ExtendedStatistics ~~can be accessed from~~ the ~~pages ''Special:ExtendedStatistics'' and~~ ''Special:AggregatedStatistic''.		ExtendedStatistics provides the page ''Special:AggregatedStatistic''.


Line 20:		Line 20:
	It offers analysis of many aspects of wiki, like:		It offers analysis of many aspects of wiki, like:

	*Number of users.		* Number of users.
	*Number of pages.		* Number of pages.
	*Edits per user.		* Edits per user.
	*Search queries and more.		* Search queries and more.

	This data can be filtered:		This data can be filtered:

	*By defining the period (from and to date).		* By defining the period (from and to date).
	*Granulation (interval to show on diagram - day, week, month, year).		* Granulation (interval to show on diagram - day, week, month, year).
	*Type (absolute, aggregate and list modes).		* Type (absolute, aggregate and list modes).
	*Additional filters depending of the data being represented.		* Additional filters depending of the data being represented.
			\|license=GPL v3 only
	}}		}}
	{{wcagCheck		{{wcagCheck

Reference:BlueSpiceInterwikiSearch

Rvogel1 — Fri, 31 Jul 2026 13:06:41 GMT

← Older revision		Revision as of 13:06, 31 July 2026
Line 20:		Line 20:
	$GLOBALS['bsgBlueSpiceInterwikiSearch']['Wiki_name'] = [		$GLOBALS['bsgBlueSpiceInterwikiSearch']['Wiki_name'] = [
	"name" => "Wiki name", // Will be displayed as the wiki name in the results		"name" => "Wiki name", // Will be displayed as the wiki name in the results
	"api-endpoint" => "http://other.wiki.com/api.~~com~~",		"api-endpoint" => "http://other.wiki.com/w/api.php",
	"search-on-wiki-url" => "http://other.wiki.com/Special:SearchCenter" // URL to the SearchCenter SpecialPage on target wiki		"search-on-wiki-url" => "http://other.wiki.com/wiki/Special:SearchCenter" // URL to the SearchCenter SpecialPage on target wiki
	];		];
	</pre>{{Messagebox\|boxtype=note\|Note text=This does not apply to [[Manual:Extension/BlueSpiceWikiFarm\|BlueSpiceWikiFarm]] users, BlueSpiceInterwikiSearch within a WikiFarm is handled separately.}}		</pre>{{Messagebox\|boxtype=note\|Note text=This does not apply to [[Manual:Extension/BlueSpiceWikiFarm\|BlueSpiceWikiFarm]] users, BlueSpiceInterwikiSearch within a WikiFarm is handled separately.}}

Setup:Release History

Margit.link-rodrigue — Thu, 30 Jul 2026 06:57:58 GMT

← Older revision		Revision as of 06:57, 30 July 2026
(One intermediate revision by the same user not shown)
Line 1:		Line 1:
	{{#vardefine:latestpatch\|{{#ask: [[-Has subobject::Setup:Release_Notes]]\|?Releasepatch\|mainlabel=-\|format=plainlist\|headers=hide\|limit=1\|searchlabel=\|sort=Releasedate\|order=desc}}}}		{{#vardefine:latestpatch\|{{#ask: [[-Has subobject::Setup:Release_Notes]]\|?Releasepatch\|mainlabel=-\|format=plainlist\|headers=hide\|limit=1\|searchlabel=\|sort=Releasedate\|order=desc}}}}
	{{Featurepage\|featured=true\|featuredesc=Release Notes: <!-- {{#var:latestpatch}} -->5.2.5, 5.1.9\|featurestart=06/24/2026}}{{Textbox\|boxtype=important\|header=Note:\|text=*Support for BlueSpice 4.x ~~ends~~ on July 15, 2026.		{{Featurepage\|featured=true\|featuredesc=Release Notes: <!-- {{#var:latestpatch}} -->5.2.6, 5.1.10\|featurestart=06/24/2026}}{{Textbox\|boxtype=important\|header=Note:\|text=*Support for BlueSpice 4.x ended on July 15, 2026.
	*Support for BlueSpice 3.x ended on March 15, 2023.\|icon=yes}}		*Support for BlueSpice 3.x ended on March 15, 2023.\|icon=yes}}

Line 16:		Line 16:
	! style="" \|Type		! style="" \|Type
	\|-		\|-
	! rowspan="13" \|'''BlueSpice 5'''		\| rowspan="14" \|'''BlueSpice 5'''
			\|5.2.6, 5.1.10
			\|06/24/2026
			\|[[Setup:Release Notes#5.2.6\|Release notes 5.2.6]]
			[[Setup:Release Notes#5.1.10\|Release notes 5.1.10]]
			\|Patch release
			\|-
	\|5.2.5, 5.1.9		\|5.2.5, 5.1.9
	\|06/24/2026		\|06/24/2026

Sandbox333

User — Tue, 28 Jul 2026 15:58:25 GMT

← Older revision		Revision as of 15:58, 28 July 2026
Line 1:		Line 1:
	<drawio filename="Sandbox333-10840722" />		<drawio filename="Sandbox333-10840722" /><math>a+a</math>
			[[File:Wald4.jpg\|thumb]]
			[[File:Test5.pdf\|thumb]]

File:Test5.pdf

User — Tue, 28 Jul 2026 15:58:19 GMT

Monique Gähl uploaded File:Test5.pdf

New page

File:Wald4.jpg

User — Tue, 28 Jul 2026 15:57:54 GMT

Monique Gähl uploaded File:Wald4.jpg

New page

File:Sandbox333-10840722.svg

User — Tue, 28 Jul 2026 15:57:23 GMT

Monique Gähl uploaded File:Sandbox333-10840722.svg DrawioEditor

New page

Sandbox333

User — Tue, 28 Jul 2026 15:57:18 GMT

Created page with "<drawio filename="Sandbox333-10840722" />"

New page

Manual:Extension/BlueSpicePrivacy

Margit.link-rodrigue — Tue, 28 Jul 2026 13:50:41 GMT

← Older revision		Revision as of 13:50, 28 July 2026
(8 intermediate revisions by the same user not shown)
Line 29:		Line 29:
	[[File:Manual:Extension BlueSpicePrivacy 1743085291590.png\|center\|thumb\|Privacy center]]		[[File:Manual:Extension BlueSpicePrivacy 1743085291590.png\|center\|thumb\|Privacy center]]

	~~This special~~ page ~~consists of~~ a ~~number of "modules"~~. ~~Each module performs~~ a ~~privacy-related function~~.		=== Requesting actions ===
			The wiki is configured so that users are not allowed to directly execute certain privacy-related actions. They need to request that operation first.[[File:Manual:PrivacyNoRequest1.png\|alt=\|center\|thumb\|484x484px\|active requests]]Users are presented with a request form in the affected sections. In this form, users can ''Request anonymization'' and ''request account deletion''. For account deletion, users can enter an optional comment explaining the reason for the request.

			All submitted requests are sent to wiki admins for review. Admins can then approve or reject the corresponding action from the page [[Manual:Extension/BlueSpicePrivacy/Administration\|Privacy Administration]].

			After submitting the request, a user sees a R''equest pending'' notice in the Privacy center. If the request is denied, the user is notified with a comment from the wiki administrator. If the user's request is approved, the user also receives a notification.
	===Anonymization===		===Anonymization===
	In this section, users can anonymize their account on the wiki. This means that users can change their username on the wiki. The new username appears wherever the username is used, including comments, page histories and logs. All traces of previous user information including profile information and profile data is removed or renamed.		In this section, users can anonymize their account on the wiki. This means that users can change their username on the wiki. The new username appears wherever the username is used, including comments, page histories and logs. All traces of previous user information including profile information and profile data is removed or renamed.
Line 35:		Line 40:
	To anonymize their account, users pick the new username (a random anonymized username is offered by default) and click "Anonymize my account". After confirmation, the process of anonymization starts, and the user receives a notification upon completion.{{Messagebox\|boxtype=important\|Note text=Changes made in the Privacy center, for example anonymization, can take up to 24 hours to be effective (until the cache expires).}}		To anonymize their account, users pick the new username (a random anonymized username is offered by default) and click "Anonymize my account". After confirmation, the process of anonymization starts, and the user receives a notification upon completion.{{Messagebox\|boxtype=important\|Note text=Changes made in the Privacy center, for example anonymization, can take up to 24 hours to be effective (until the cache expires).}}
	===Delete your account===		===Delete your account===
	~~You~~ can ~~delete all traces~~ of ~~your~~ account ~~from the wiki~~ by clicking the "~~Delete your~~ account" button. ~~After confirmation~~, the user ~~account is deleted. In case~~ there is an ~~error in the process~~, ~~users will~~ be ~~notified~~ of the ~~failed deletion process~~.		Users can request the deletion of their account by clicking the "Request account deletion" button. Deleting an account removes all default links to hat user account from the wiki. All contributions remain and are subsequently attributed to "Deleted User," which appears in place of the original username.

			If the username was also used within wiki pages, for example in meeting minutes, as parameter values in templates, or via [[Manual:Extension/AtMentions\|user mentions]], and there is an obligation to delete these occurences as well, then these instances must be removed manually (for example by using the "Replace text" special page). Such deletion affects only the latest revision of the pages in each case.

	~~By deleting their account~~, ~~users will remove all references~~ to ~~their user account anywhere on~~ the wiki. ~~All~~ of ~~the user's contributions are then attributed to "Deleted user"~~, ~~which will appear instead of~~ the ~~original username~~. ~~The~~ wiki is ~~usually set~~ to ~~require an administrator~~ to ~~delete a user account upon request. The delete-button will show "Request account deletion" accordingly~~.		{{Textbox\|boxtype=note\|header=GDPR vs. Statutory Retention Obligations:\|text=If a statutory retention obligation applies, the obligation to delete data under the GDPR is suspended. The data must not be deleted during this period.
			<p>
			Consequently, an administrator may reject a deletion or anonymization request.
			</p><p>
			Furthermore, administrators should generally ensure that no personal data is collected within the wiki. However, usernames and mentions often occur within the realm of social or role-related interaction and do not necessarily constitute protected personal information. In cases of doubt, please consult the responsible data protection officer.
			</p><p>
			If your organizations has specific compliance obligations, wiki owners also need to check with their data protection officer as to whether it is allowed to mention users or to link to their profile pages in the page content.</p>\|icon=yes}}

	=== Transparency ===		=== Transparency ===
Line 54:		Line 67:
	===Privacy policy consent===		===Privacy policy consent===
	In this section, users can change their consent to the wiki's privacy policy. Further options may appear based on a specific wiki configuration. Users can also change their cookies consent (as described above).		In this section, users can change their consent to the wiki's privacy policy. Further options may appear based on a specific wiki configuration. Users can also change their cookies consent (as described above).

	~~==Requesting actions==~~
	The wiki is configured so that users are not allowed to directly execute certain privacy-related actions. They need to request that operation first.[[File:Manual:PrivacyNoRequest1.png\|alt=\|center\|thumb\|484x484px\|active requests]]Users are presented with a request form in the affected sections. In this form, users can click ''Request anonymization'' and ''Request account deletion''. For account deletion, users can enter an optional comment explaining the reason for the request.

	All submitted requests are sent to wiki admins for review. Admins can then approve or reject the corresponding action via the [[Manual:Extension/BlueSpicePrivacy/Administration\|Privacy Administration]].

	After submitting the request, a user sees a R''equest pending'' notice in the Privacy center. If the request is denied, the user is notified with a comment from the wiki administrator. If the user's request is approved, the user also receives a notification.

	{{translation}}		{{translation}}
	[[Category:Personalization]]		[[Category:Personalization]]

MediaWiki:Common.css

Margit.link-rodrigue — Tue, 28 Jul 2026 12:45:57 GMT

Show changes

Manual:Extension/BlueSpiceTranslationTransfer

Akulbii — Tue, 28 Jul 2026 10:00:08 GMT

Add configuration examples

@@ Line 176: / Line 176: @@
 ** Top level domain - <code>.se</code>, but language code is <code>sv</code>.
 * Norwegian
-** Top level domain - <code>.no</code>, but language code is <code>nb</code> ( <code>no</code> is also a "macrolanguage", but MediaWiki uses <code>nb</code>, and as a fallback from <code>no</code> anyways)
+** Top level domain - <code>.no</code>, but language code is <code>nb</code> ( <code>no</code> is also a "macrolanguage", but MediaWiki uses <code>nb</code>, and as a fallback from <code>no</code> anyways).
-In any of cases above, if there is still a need to have <code>cn</code> wiki instance taking part of <code>zh</code> language in TranslationTransfer workflow - it can be done with additional configuration in one of "LocalSettings-similar" files (like <code>post-init-settings.php</code> ), to manually "wire" <code>cn</code> wiki instance with <code>zh</code> language.{{Box Links-en|Topic1=[[Manual:Extension/ContentTransfer]]|Topic2=[[Manual:Extension/MergeArticles]]|Topic3=[[Manual:Extension/AdhocTranslation]]}}
+Example of such configuration:<syntaxhighlight lang="php">$GLOBALS['wgExtensionFunctions'][] = static function() {
 {{translation}}
 [[Category:BlueSpice farm]]

MediaWiki:Common.css

Margit.link-rodrigue — Tue, 28 Jul 2026 09:37:13 GMT

Blanked the page

Show changes

Numbering ordered lists

Margit.link-rodrigue — Tue, 28 Jul 2026 09:34:30 GMT

← Older revision		Revision as of 09:34, 28 July 2026
(One intermediate revision by the same user not shown)
Line 29:		Line 29:
	}		}

	/Number footnotes separately /		/Number footnotes separately/
	.pdfcreator-page-content .references ::marker,		.pdfcreator-page-content .references::marker,
	#mw-content-text .references ::marker {		#mw-content-text .references::marker {
	content: " ";		content: " ";
	}		}
Line 43:		Line 43:
	counter-increment: ref;		counter-increment: ref;
	content: counter(ref) ". ";		content: counter(ref) ". ";
	~~float: left;~~		margin-right: 0;
	margin-right: ~~1em;~~
	}
	~~.pdfcreator-page-content ol > li li,~~
	~~#mw-content-text ol > li li {~~
	~~margin-left: -~~0~~.3em~~;
	}		}
	</syntaxhighlight>Output:		</syntaxhighlight>Output:

MediaWiki:Common.css

Margit.link-rodrigue — Tue, 28 Jul 2026 09:31:04 GMT

← Older revision		Revision as of 09:31, 28 July 2026
(2 intermediate revisions by the same user not shown)
Line 8:		Line 8:
	/compact version of table - smaller font, less padding/		/compact version of table - smaller font, less padding/
	table.compact caption, table.compact tr th, table.compact tr td {font-size:0.9rem!important; padding:4px!important}		table.compact caption, table.compact tr th, table.compact tr td {font-size:0.9rem!important; padding:4px!important}



	/Custom formatting for centering footer links/		/Custom formatting for centering footer links/
Line 1,362:		Line 1,364:


	/~~Number footnotes separately~~ /		/* Styles for formatting sub-ordered-list-items with 1.1., 1.1.1., etc.)*/
	#mw-content-~~text .references :~~:~~marker {~~		/* First, set all numbered lists to use counter-reset */
	~~content~~: ~~" "~~;		.pdfcreator-page-content ol,
			.mw-body-content ol,
			ol.ve-ce-branchNode {
			counter-reset: item;
			margin: 0.3em 0 0 2.2em;
	}		}

	#mw-content~~-text~~ ol.~~references~~ {		/* Display all list items in a numbered list in block display */
	~~counter-reset~~: ~~ref~~;		.pdfcreator-page-content ol > li,
	~~list~~-~~style~~-~~type~~: ~~none;~~		.mw-body-content ol > li,
			ol.ve-ce-branchNode > li {
			display: block;
			}
			ol.ve-ce-branchNode > li > p {
			display: inline
	}		}

	#mw-content~~-text~~ ol~~.references~~ li:before {		/* Use a counter that checks the number of items and adds a "." between them and ends with ". " */
	~~counter~~-~~increment~~: ~~ref;~~		.pdfcreator-page-content ol > li:before,
	content: ~~counter~~(~~ref~~) ". ";		.mw-body-content ol > li:before,
	~~float: left;~~		ol.ve-ce-branchNode > li:before {
	~~margin~~-~~right~~: ~~1em~~;		content: counters(item, ".") ". ";
			counter-increment: item;
	}		}

	#mw-content-~~text~~ ol>li li {		/Number footnotes separately/
	margin-~~left~~: -0~~.3em~~;		.pdfcreator-page-content .references::marker,
			.mw-body-content .references::marker {
			content: " ";
			}
			.pdfcreator-page-content ol.references,
			.mw-body-content ol.references {
			counter-reset: ref;
			list-style-type: none;
			}
			.pdfcreator-page-content ol.references li:before,
			.mw-body-content ol.references li:before {
			counter-increment: ref;
			content: counter(ref) ". ";
			margin-right: 0;
	}		}

Numbering ordered lists

Margit.link-rodrigue — Tue, 28 Jul 2026 09:15:28 GMT

← Older revision		Revision as of 09:15, 28 July 2026
Line 1:		Line 1:
	To number bullets in the page text consecutively, you can add the following CSS to the page ''MediaWiki:Common.css''. Please note that this custom styling may not work if it is incompatible with CSS declarations from other stylesheets in the wiki.		To number bullets in the page text consecutively, you can add the following CSS to the page ''MediaWiki:Common.css''. Please note that this custom styling may not work if it is incompatible with CSS declarations from other stylesheets in the wiki.
	~~{{Textbox\|boxtype=important\|header=Important!\|text=This styling does NOT apply in the PDF export.\|icon=yes}}~~Example for separately numbered footnotes.<ref>Footnote 1</ref> <ref>Footnote 2</ref><syntaxhighlight lang="css">
			Example for separately numbered footnotes.<ref>Footnote 1</ref> <ref>Footnote 2</ref><syntaxhighlight lang="css">
	/* Styles for formatting sub-ordered-list-items with 1.1., 1.1.1., etc.)*/		/* Styles for formatting sub-ordered-list-items with 1.1., 1.1.1., etc.)*/

	/* First, set all numbered lists to use counter-reset */		/* First, set all numbered lists to use counter-reset */
	#mw-content-text ol, ol.ve-ce-branchNode {		.pdfcreator-page-content ol,
	counter-reset: item;		#mw-content-text ol,
	margin: 0.3em 0 0 2.2em;		ol.ve-ce-branchNode {
			counter-reset: item;
			margin: 0.3em 0 0 2.2em;
	}		}

	/* Display all list items in a numbered list in block display */		/* Display all list items in a numbered list in block display */
	#mw-content-text ol>li, ol.ve-ce-branchNode>li {		.pdfcreator-page-content ol > li,
	display: block;		#mw-content-text ol > li,
			ol.ve-ce-branchNode > li {
			display: block;
			}
			ol.ve-ce-branchNode > li > p {
			display: inline
	}		}
	~~ol.ve-ce-branchNode>li > p {display:inline}~~

	/* Use a counter that checks the number of items and adds a "." between them and ends with ". " */		/* Use a counter that checks the number of items and adds a "." between them and ends with ". " */
	#mw-content-text ol>li:before, ol.ve-ce-branchNode>li:before {		.pdfcreator-page-content ol > li:before,
	content: counters(item, ".") ". ";		#mw-content-text ol > li:before,
	counter-increment: item;		ol.ve-ce-branchNode > li:before {
			content: counters(item, ".") ". ";
			counter-increment: item;
	}		}

	/Number footnotes separately /		/Number footnotes separately /
	#mw-content-text .references ::marker {		.pdfcreator-page-content .references ::marker,
	content: " ";		#mw-content-text .references ::marker {
			content: " ";
	}		}
	#mw-content-text ol.references {		.pdfcreator-page-content ol.references,
	counter-reset:ref; list-style-type:none;		#mw-content-text ol.references {
			counter-reset: ref;
			list-style-type: none;
	}		}
	#mw-content-text ol.references li:before{		.pdfcreator-page-content ol.references li:before,
	counter-increment:ref;		#mw-content-text ol.references li:before {
	content:counter(ref) ". ";		counter-increment: ref;
			content: counter(ref) ". ";
	float: left;		float: left;
	margin-right: 1em;		margin-right: 1em;
	}
	~~#mw-content-text ol > li li {~~
	~~margin-left:-0.3em;~~
	}		}
			.pdfcreator-page-content ol > li li,
			#mw-content-text ol > li li {
			margin-left: -0.3em;
			}
	</syntaxhighlight>Output:		</syntaxhighlight>Output:

Manual:Extension/BlueSpiceTranslationTransfer

Akulbii — Mon, 27 Jul 2026 16:46:56 GMT

Add info about cases when custom BSTT targets configuration needed

← Older revision		Revision as of 16:46, 27 July 2026
Line 169:		Line 169:
	In a wiki instance with a configured DeepL API key, ad-hoc translations are possible. This means that users whose language settings differ from the wiki's content language are shown a link to translate the page in their language . This translation is only valid until the page is reloaded. See the documentation for [[Manual:Extension/AdhocTranslation\|ad-hoc translations]].		In a wiki instance with a configured DeepL API key, ad-hoc translations are possible. This means that users whose language settings differ from the wiki's content language are shown a link to translate the page in their language . This translation is only valid until the page is reloaded. See the documentation for [[Manual:Extension/AdhocTranslation\|ad-hoc translations]].

	{{Box Links-en\|Topic1=[[Manual:Extension/ContentTransfer]]\|Topic2=[[Manual:Extension/MergeArticles]]\|Topic3=[[Manual:Extension/AdhocTranslation]]}}		== Custom paths ==
			In case with some languages there may be a confusion because of separation between top-level domain and language code. We encountered 3 such cases:
			* Chinese
			** Top level domain is <code>.cn</code>, still language code is <code>zh</code> (and possible variations like <code>zh-hk</code> or <code>zh-cn</code>). So if one will create wiki instance named <code>cn</code> - it will not be automatically set up for TranslationTransfer.
			* Swedish
			** Top level domain - <code>.se</code>, but language code is <code>sv</code>.
			* Norwegian
			** Top level domain - <code>.no</code>, but language code is <code>nb</code> ( <code>no</code> is also a "macrolanguage", but MediaWiki uses <code>nb</code>, and as a fallback from <code>no</code> anyways)


			In any of cases above, if there is still a need to have <code>cn</code> wiki instance taking part of <code>zh</code> language in TranslationTransfer workflow - it can be done with additional configuration in one of "LocalSettings-similar" files (like <code>post-init-settings.php</code> ), to manually "wire" <code>cn</code> wiki instance with <code>zh</code> language.{{Box Links-en\|Topic1=[[Manual:Extension/ContentTransfer]]\|Topic2=[[Manual:Extension/MergeArticles]]\|Topic3=[[Manual:Extension/AdhocTranslation]]}}

	{{translation}}		{{translation}}
	[[Category:BlueSpice farm]]		[[Category:BlueSpice farm]]

Security:Security Advisories

Mglaser — Mon, 27 Jul 2026 12:58:34 GMT

← Older revision		Revision as of 12:58, 27 July 2026
Line 6:		Line 6:
	! style="" \|Summary		! style="" \|Summary
	!Severity		!Severity
			\|-
			\|[[Security:Security Advisories/BSSA-2026-05\|BSSA-2026-05]]
			\|2026-07-27
			\|Security vulnerabilities in containers and extensions
			\|[https://nvd.nist.gov/vuln/detail/CVE-2026-59933 CVE-2026-59933], [https://nvd.nist.gov/vuln/detail/CVE-2025-14813 CVE-2025-14813], [https://nvd.nist.gov/vuln/detail/CVE-2025-65896 CVE-2025-65896], [https://nvd.nist.gov/vuln/detail/CVE-2026-59873 CVE-2026-59873]
			\|Uncontrolled ressource consumption, infinite loop
			\| style="" class="col-green-bg" \|Low
	\|-		\|-
	\|[[Security:Security Advisories/BSSA-2026-04\|BSSA-2026-04]]		\|[[Security:Security Advisories/BSSA-2026-04\|BSSA-2026-04]]

Security:Security Advisories/BSSA-2026-05

Rvogel1 — Mon, 27 Jul 2026 12:50:07 GMT

← Older revision		Revision as of 12:50, 27 July 2026
Line 85:		Line 85:

	== Solution ==		== Solution ==
	No immediate action required.		No immediate action required. If concerned about CVE-2026-59933, apply the temporary fix. CVE-2026-59933 will be fixed in one of the next patch releases.

Template:BSExtensionInfo

Margit.link-rodrigue — Mon, 27 Jul 2026 10:20:12 GMT

← Older revision		Revision as of 10:20, 27 July 2026
(2 intermediate revisions by the same user not shown)
(No difference)

Security:Security Advisories/BSSA-2026-05

Rvogel1 — Mon, 27 Jul 2026 09:45:17 GMT

← Older revision		Revision as of 09:45, 27 July 2026
(One intermediate revision by the same user not shown)
Line 5:		Line 5:
	\|-		\|-
	\|Date		\|Date
	\|2026-07-17		\|2026-07-27
	\|-		\|-
	\|Severity		\|Severity
	\|reported "high", BlueSpice assessment: '''not affected'''		\|reported "high", BlueSpice assessment: '''not affected / low'''
	\|-		\|-
	\|Affected		\|Affected
Line 21:		Line 21:
	* [https://access.redhat.com/security/cve/cve-2025-14813 CVE-2025-14813]		* [https://access.redhat.com/security/cve/cve-2025-14813 CVE-2025-14813]
	* [https://nvd.nist.gov/vuln/detail/CVE-2025-65896 CVE-2025-65896]		* [https://nvd.nist.gov/vuln/detail/CVE-2025-65896 CVE-2025-65896]
			* [https://nvd.nist.gov/vuln/detail/CVE-2026-59873 CVE-2026-59873]
			* [https://advisories.gitlab.com/composer/phpoffice/phpspreadsheet/CVE-2026-59933/ CVE-2026-59933]
	\|}		\|}

Line 39:		Line 41:
	\|SQL Injection via dictionary as params		\|SQL Injection via dictionary as params
	\| style="" class="col-green-bg" \|not affected		\| style="" class="col-green-bg" \|not affected
			\|-
			\|CVE-2026-59873
			\|<code>bluespice/ai</code>, <code>bluespice/chat</code>, <code>bluespice/formula</code>, <code>bluespice/wire</code>
			\|Allocation of Resources Without Limits or Throttling
			\| style="" class="col-green-bg" \|not affected
			\|-
			\|CVE-2026-59933
			\|
			* Extension:BlueSpiceUEModuleTable2Excel
			* Extension:DataTransfer
			* Extension:SemanticResultFormats
			\|
			* Uncontrolled Resource Consumption
			* Loop with Unreachable Exit Condition ('Infinite Loop')
			\| style="" class="col-orange-bg" \|low
	\|}		\|}

Line 54:		Line 71:
	\| style="" class="col-green-bg" \|Asyncmy is only used as the DB API layer for SQLAlchemy to connect to MySQL, SQLAlchemy enforces a "format" parameter style, which only uses "%s" placeholder strings for SQL queries. This is opposed to inserting values via a dictionary, meaning no impact from this CVE is possible.		\| style="" class="col-green-bg" \|Asyncmy is only used as the DB API layer for SQLAlchemy to connect to MySQL, SQLAlchemy enforces a "format" parameter style, which only uses "%s" placeholder strings for SQL queries. This is opposed to inserting values via a dictionary, meaning no impact from this CVE is possible.
	\|No action required.		\|No action required.
			\|-
			\|CVE-2026-59873
			\| style="" class="col-green-bg" \|None of the code makes use of the affected package / code (<code>node-tar</code>). In all but <code>bluespice/formula</code> it is just part of the base image content. In <code>bluespice/formula</code>, it is a transient dependency, but also not used. Not even in the dependency code.
			\|No action required.
			\|-
			\|CVE-2026-59933
			\| style="" class="col-orange-bg" \|Extension:BlueSpiceUEModuleTable2Excel and Extension:SemanticResultFormats don't use affected code at all. Only Extension:DataTransfer may be affected.
			\|If concerned temporarily disable Special:ImportSpreadsheet via <code>$DATA/wiki/bluespice/pre-init-settings.php</code>.
			\Hooks::register( 'SpecialPage_initList', static function( &$specialPages ) {
			unset( $list['ImportSpreadsheet'] );
			});
	\|}		\|}

	== Solution ==		== Solution ==
	No immediate action required.		No immediate action required.

Setup:Installation Guide/Advanced/Maintenance scripts/DumpNamespaces

Margit.link-rodrigue — Mon, 27 Jul 2026 08:31:22 GMT

@@ Line 26: / Line 26: @@
 <syntaxhighlight lang="php">
 php extensions/PDFCreator/maintenance/DumpNamespaces.php --user=WikiSysop --dest=cache/ --limit=100 --template=MyTemplate --mail-recipient=me@my-server.test --mail-subject="Namespace dump for wiki test"
 </syntaxhighlight>

Pagedraft:Manual:Extension/SimpleCharts

Margit.link-rodrigue — Fri, 24 Jul 2026 13:50:33 GMT

Pagedraft:Manual:Extension/KPIVisuals

Margit.link-rodrigue — Fri, 24 Jul 2026 13:40:44 GMT

Pagedraft:BlueSpice 6

Margit.link-rodrigue — Fri, 24 Jul 2026 13:10:52 GMT

Pagedraft:Manual:Extension/SimpleCharts

Margit.link-rodrigue — Fri, 24 Jul 2026 12:45:40 GMT

Pagedraft:BlueSpice 6

Margit.link-rodrigue — Fri, 24 Jul 2026 12:43:54 GMT

Pagedraft:Manual:Extension/KPIVisuals

Margit.link-rodrigue — Fri, 24 Jul 2026 12:26:08 GMT