Date: Sun, 1 May 2005 22:11:01 GMT From: Gerrit Beine <tux@pinguru.net> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/80518: Update port: www/mediawiki Message-ID: <200505012211.j41MB10F076558@www.freebsd.org> Resent-Message-ID: <200505012220.j41MK2X0085241@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 80518 >Category: ports >Synopsis: Update port: www/mediawiki >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Sun May 01 22:20:01 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Gerrit Beine >Release: FreeBSD 5.3-RELEASE >Organization: pitcom GmbH >Environment: FreeBSD asus.site 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Fri Nov 12 23:43:33 CET 2004 root@asus.site:/usr/src/sys/i386/compile/ASUS i386 >Description: Update to the current version 1.3.12: MediaWiki 1.3.12 is a security maintenance release. A cross-site scripting injection vulnerability was discovered, which affects only MSIE clients and is only open if MediaWiki has been manually configured to run output through HTML Tidy ($wgUseTidy). >How-To-Repeat: >Fix: diff -Nur /usr/ports/www/mediawiki/Makefile mediawiki/Makefile --- /usr/ports/www/mediawiki/Makefile Tue Mar 8 10:16:34 2005 +++ mediawiki/Makefile Mon May 2 00:03:46 2005 @@ -6,8 +6,7 @@ # PORTNAME= mediawiki -PORTVERSION= 1.3.11 -PORTREVISION= 1 +PORTVERSION= 1.3.12 CATEGORIES= www MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= wikipedia @@ -16,9 +15,30 @@ COMMENT= The wiki enginge used by Wikipedia NO_BUILD= yes -USE_PHP= mysql session zlib +USE_PHP= iconv mbstring pcre session xml zlib imagick readline WANT_PHP_WEB= yes MEDIAWIKIDIR?= www/data-dist/mediawiki + +OPTIONS= PGSQL "Use PostgreSQL instead of MySQL" off \ + LDAP "Use LDAP authentication" off + +PORT_DBDIR?= /var/db/ports +LATEST_LINK= ${PORTNAME} +OPTIONSFILE?= ${PORT_DBDIR}/${LATEST_LINK}/options + +.if exists(${OPTIONSFILE}) +.include "${OPTIONSFILE}" +.endif + +.if defined(WITH_PGSQL) +USE_PHP+= pgsql +.else +USE_PHP+= mysql +.endif + +.if defined(WITH_LDAP) +USE_PHP+= ldap +.endif do-install: -${MKDIR} ${PREFIX}/${MEDIAWIKIDIR} diff -Nur /usr/ports/www/mediawiki/distinfo mediawiki/distinfo --- /usr/ports/www/mediawiki/distinfo Fri Mar 4 10:18:15 2005 +++ mediawiki/distinfo Mon May 2 00:04:30 2005 @@ -1,2 +1,2 @@ -MD5 (mediawiki-1.3.11.tar.gz) = 33f17f1347934d5cb36f81f9215e734f -SIZE (mediawiki-1.3.11.tar.gz) = 1577145 +MD5 (mediawiki-1.3.12.tar.gz) = 97003e0860cf05075dd84efdb675defb +SIZE (mediawiki-1.3.12.tar.gz) = 1577784 >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200505012211.j41MB10F076558>