diff options
| author | wen <wen@pkgsrc.org> | 2014-12-20 02:26:59 +0000 |
|---|---|---|
| committer | wen <wen@pkgsrc.org> | 2014-12-20 02:26:59 +0000 |
| commit | 42eb74698d7388349a2cffe4cf63adb34e32e093 (patch) | |
| tree | 21057e7ab256fc1d28ce1acfb5bd5b7287816fe2 /www/mediawiki | |
| parent | f7fdbc529d20f3a5accc57d1468697a25102fcb7 (diff) | |
| download | pkgsrc-42eb74698d7388349a2cffe4cf63adb34e32e093.tar.gz | |
Update to 1.24.1(security update)
Upstream changes:
MediaWiki 1.24.1
This is a security and maintenance release of the MediaWiki 1.24 branch.
Changes since 1.24.0
(bug T76686) [SECURITY] thumb.php outputs wikitext message as raw HTML, which could lead to xss. Permission to edit MediaWiki namespace is required to exploit this.
(bug T77028) [SECURITY] Malicious site can bypass CORS restrictions in $wgCrossSiteAJAXdomains in API calls if it only included an allowed domain as part of its name.
(bug T74222) The original patch for T74222 was reverted as unnecessary.
Fixed a couple of entries in RELEASE-NOTES-1.24.
(bug T76168) OutputPage: Add accessors for some protected properties.
(bug T74834) Make 1.24 branch directly installable under PostgreSQL.
Diffstat (limited to 'www/mediawiki')
| -rw-r--r-- | www/mediawiki/Makefile | 5 | ||||
| -rw-r--r-- | www/mediawiki/PLIST | 3 | ||||
| -rw-r--r-- | www/mediawiki/distinfo | 8 |
3 files changed, 8 insertions, 8 deletions
diff --git a/www/mediawiki/Makefile b/www/mediawiki/Makefile index c7984aecda4..f6e14fb521e 100644 --- a/www/mediawiki/Makefile +++ b/www/mediawiki/Makefile @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.49 2014/11/29 05:08:33 wen Exp $ +# $NetBSD: Makefile,v 1.50 2014/12/20 02:26:59 wen Exp $ DISTNAME= mediawiki-${VER}.${PVER} CATEGORIES= www @@ -22,7 +22,7 @@ INSTALLATION_DIRS= ${EGDIR} share/mediawiki .include "options.mk" VER= 1.24 -PVER= 0 +PVER= 1 APACHE_USER?= www APACHE_GROUP?= www @@ -72,7 +72,6 @@ SUBST_CLASSES+= python SUBST_STAGE.python= post-patch SUBST_MESSAGE.python= Fixing python path SUBST_FILES.python+= extensions/ConfirmEdit/captcha.py -+SUBST_FILES.python+= maintenance/cssjanus/cssjanus.py maintenance/cssjanus/csslex.py SUBST_SED.python= -e "s,/usr/bin/python,${PYTHONBIN}," SUBST_CLASSES+= python2 diff --git a/www/mediawiki/PLIST b/www/mediawiki/PLIST index abf6abf9754..4f309907f3c 100644 --- a/www/mediawiki/PLIST +++ b/www/mediawiki/PLIST @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.21 2014/11/29 05:08:33 wen Exp $ +@comment $NetBSD: PLIST,v 1.22 2014/12/20 02:26:59 wen Exp $ share/examples/mediawiki/mediawiki.conf share/mediawiki/COPYING share/mediawiki/CREDITS @@ -5445,6 +5445,7 @@ share/mediawiki/maintenance/postgres/archives/patch-valid_tag.sql share/mediawiki/maintenance/postgres/compare_schemas.pl share/mediawiki/maintenance/postgres/mediawiki_mysql2postgres.pl share/mediawiki/maintenance/postgres/tables.sql +share/mediawiki/maintenance/postgres/update-keys.sql share/mediawiki/maintenance/preprocessDump.php share/mediawiki/maintenance/preprocessorFuzzTest.php share/mediawiki/maintenance/protect.php diff --git a/www/mediawiki/distinfo b/www/mediawiki/distinfo index ffa99dc4ba0..d680c6d02e9 100644 --- a/www/mediawiki/distinfo +++ b/www/mediawiki/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.36 2014/11/29 05:08:33 wen Exp $ +$NetBSD: distinfo,v 1.37 2014/12/20 02:26:59 wen Exp $ -SHA1 (mediawiki-1.24.0.tar.gz) = be618e04a0f3db8e3b977936eea2b42388a64609 -RMD160 (mediawiki-1.24.0.tar.gz) = 09d588e64059a7e19f4a53fe66c7ec84d52c0b40 -Size (mediawiki-1.24.0.tar.gz) = 20726660 bytes +SHA1 (mediawiki-1.24.1.tar.gz) = 9ad18d6f432bb77a27d5d3145278a296b15186db +RMD160 (mediawiki-1.24.1.tar.gz) = 2ae8706ec248947a1da78f498f4991e81c55e1fb +Size (mediawiki-1.24.1.tar.gz) = 20725572 bytes |