Date: Fri, 8 Jul 2005 13:26:02 GMT From: Gerrit Beine <tux@pinguru.net> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/83142: Update port: www/mediawiki Message-ID: <200507081326.j68DQ2Do077196@www.freebsd.org> Resent-Message-ID: <200507081330.j68DU8sS086431@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 83142
>Category: ports
>Synopsis: Update port: www/mediawiki
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Fri Jul 08 13:30:08 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Gerrit Beine
>Release: FreeBSD 5.4-RELEASE-p1
>Organization:
pitcom GmbH
>Environment:
FreeBSD asus 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #0: Sun May 15 16:37:58 CEST 2005 root@asus:/usr/src/sys/i386/compile/ASUS i386
>Description:
Taken from MediaWiki 1.4.6 announcement:
MediaWiki 1.4.6 is a bug fix and security update release.
Incorrect escaping of a parameter in the page move template could
be used to inject JavaScript code by getting a victim to visit a
maliciously constructed URL. Users of vulnerable releases are
recommended to upgrade to this release.
Vulnerable versions:
* 1.5 preview series: n <= 1.5beta2 vulnerable, fixed in 1.5beta3
* 1.4 stable series: 1.4beta6 <= n <= 1.4.5 vulnerable, fixed in 1.4.6
* 1.3 legacy series: not vulnerable
This release also includes fixes for some rare bug annoying HTTP errors,
a PHP 4.1.2 breakage bug, and works around some template limitations
introduced in 1.4.5. See the changelog in the release notes for a
detailed list of bugs fixed.
>How-To-Repeat:
>Fix:
diff -Nur /usr/ports/www/mediawiki/Makefile mediawiki/Makefile
--- /usr/ports/www/mediawiki/Makefile Wed Jun 8 11:21:28 2005
+++ mediawiki/Makefile Fri Jul 8 15:21:06 2005
@@ -6,7 +6,7 @@
#
PORTNAME= mediawiki
-PORTVERSION= 1.4.5
+PORTVERSION= 1.4.6
PORTREVISION= 1
CATEGORIES= www
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
diff -Nur /usr/ports/www/mediawiki/distinfo mediawiki/distinfo
--- /usr/ports/www/mediawiki/distinfo Wed Jun 8 11:21:28 2005
+++ mediawiki/distinfo Fri Jul 8 15:22:28 2005
@@ -1,2 +1,2 @@
-MD5 (mediawiki-1.4.5.tar.gz) = 961e3083b1c036a301b24ac4e614b81b
-SIZE (mediawiki-1.4.5.tar.gz) = 1939746
+MD5 (mediawiki-1.4.6.tar.gz) = f4f82bd486756c279f0c1977b290ce3b
+SIZE (mediawiki-1.4.6.tar.gz) = 1981191
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200507081326.j68DQ2Do077196>