diff options
| author | wen <wen@pkgsrc.org> | 2015-12-20 02:31:05 +0000 |
|---|---|---|
| committer | wen <wen@pkgsrc.org> | 2015-12-20 02:31:05 +0000 |
| commit | 9a9c59943337268edaef90fa33aed21b1cedf60a (patch) | |
| tree | 86e95c9ed8e3957897801f6e885028e1ec4ebdc1 /www/mediawiki | |
| parent | b85f234bdc817dedd6604523a379c177b170f936 (diff) | |
| download | pkgsrc-9a9c59943337268edaef90fa33aed21b1cedf60a.tar.gz | |
Update to 1.26.1(security update)
Upstream changes:
MediaWiki 1.26.1
This is a security and bug fix release of the MediaWiki 1.26 branch.
Changes since 1.26
(bug T117899) SECURITY: $wgArticlePath can no longer be set to relative paths that do not begin with a slash. This enabled trivial XSS attacks. Configuration values such as "http://my.wiki.com/wiki/$1" are fine, as are "/wiki/$1". A value such as "$1" or "wiki/$1" is not and will now throw an error
(bug T119309) SECURITY: Use hash_compare() for edit token comparison
(bug T118032) SECURITY: Don't allow cURL to interpret POST parameters starting with '@' as file uploads
(bug T115522) SECURITY: Passwords generated by User::randomPassword() can no longer be shorter than $wgMinimalPasswordLength
(bug T97897) SECURITY: Improve IP parsing and trimming. Previous behavior could result in improper blocks being issued
(bug T109724) SECURITY: Special:MyPage, Special:MyTalk, Special:MyContributions and related pages no longer use HTTP redirects and are now redirected by MediaWiki
Fixed ConfigException in ExpandTemplates due to AlwaysUseTidy.
Fixed stray literal \n in Special:Search.
Fix issue that breaks HHVM Repo Authorative mode.
(bug T120267) Work around APCu memory corruption bug
Diffstat (limited to 'www/mediawiki')
| -rw-r--r-- | www/mediawiki/Makefile | 4 | ||||
| -rw-r--r-- | www/mediawiki/distinfo | 10 |
2 files changed, 7 insertions, 7 deletions
diff --git a/www/mediawiki/Makefile b/www/mediawiki/Makefile index 7ec3a0795bb..14ce66792c5 100644 --- a/www/mediawiki/Makefile +++ b/www/mediawiki/Makefile @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.56 2015/12/01 16:03:21 wen Exp $ +# $NetBSD: Makefile,v 1.57 2015/12/20 02:31:05 wen Exp $ DISTNAME= mediawiki-${VER}.${PVER} CATEGORIES= www @@ -22,7 +22,7 @@ INSTALLATION_DIRS= ${EGDIR} share/mediawiki .include "options.mk" VER= 1.26 -PVER= 0 +PVER= 1 APACHE_USER?= www APACHE_GROUP?= www diff --git a/www/mediawiki/distinfo b/www/mediawiki/distinfo index 19c28f75757..a8b54e0757e 100644 --- a/www/mediawiki/distinfo +++ b/www/mediawiki/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.42 2015/12/01 16:03:22 wen Exp $ +$NetBSD: distinfo,v 1.43 2015/12/20 02:31:05 wen Exp $ -SHA1 (mediawiki-1.26.0.tar.gz) = b2fd0ba68f4f89f67a55e6ac385f774ef1d5ffbf -RMD160 (mediawiki-1.26.0.tar.gz) = c6580a513640142d431238b4525202cd7c290eca -SHA512 (mediawiki-1.26.0.tar.gz) = 5aa7ecd0d5222fcfd10b41e4299dd4e78b8ef242b883f8ed8c78027857baa04a0fea7e9a5b2ba3092715788040d6b241b3408f1928dbb7ab16c06b438416e76b -Size (mediawiki-1.26.0.tar.gz) = 25174530 bytes +SHA1 (mediawiki-1.26.1.tar.gz) = 39164bf978d06ad4bf2ef258304d4f5d22e8d542 +RMD160 (mediawiki-1.26.1.tar.gz) = 0a6a6d092bce960769d79a7364af0de79680bc2c +SHA512 (mediawiki-1.26.1.tar.gz) = d7cf92ef46ac33f7c3856837cbb08ee0b17571520c2ad3338ba7f63c70bfb5a47cd22f0590de7e15e3c7e13646b05be8dbc7bd8c10b533131b6ec2700f5a3f7a +Size (mediawiki-1.26.1.tar.gz) = 25176990 bytes |