ports/83142: Update port: www/mediawiki

Gerrit Beine tux at pinguru.net
Fri Jul 8 13:30:09 UTC 2005


>Number:         83142
>Category:       ports
>Synopsis:       Update port: www/mediawiki
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jul 08 13:30:08 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Gerrit Beine
>Release:        FreeBSD 5.4-RELEASE-p1
>Organization:
pitcom GmbH
>Environment:
FreeBSD asus 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #0: Sun May 15 16:37:58 CEST 2005     root at asus:/usr/src/sys/i386/compile/ASUS  i386

>Description:
Taken from MediaWiki 1.4.6 announcement:

MediaWiki 1.4.6 is a bug fix and security update release.

Incorrect escaping of a parameter in the page move template could
be used to inject JavaScript code by getting a victim to visit a
maliciously constructed URL. Users of vulnerable releases are
recommended to upgrade to this release.

Vulnerable versions:
* 1.5 preview series: n <= 1.5beta2 vulnerable, fixed in 1.5beta3
* 1.4 stable series: 1.4beta6 <= n <= 1.4.5 vulnerable, fixed in 1.4.6
* 1.3 legacy series: not vulnerable

This release also includes fixes for some rare bug annoying HTTP errors,
a PHP 4.1.2 breakage bug, and works around some template limitations
introduced in 1.4.5. See the changelog in the release notes for a
detailed list of bugs fixed. 
>How-To-Repeat:
      
>Fix:
diff -Nur /usr/ports/www/mediawiki/Makefile mediawiki/Makefile
--- /usr/ports/www/mediawiki/Makefile   Wed Jun  8 11:21:28 2005
+++ mediawiki/Makefile  Fri Jul  8 15:21:06 2005
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=      mediawiki
-PORTVERSION=   1.4.5
+PORTVERSION=   1.4.6
 PORTREVISION=  1
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE}
diff -Nur /usr/ports/www/mediawiki/distinfo mediawiki/distinfo
--- /usr/ports/www/mediawiki/distinfo   Wed Jun  8 11:21:28 2005
+++ mediawiki/distinfo  Fri Jul  8 15:22:28 2005
@@ -1,2 +1,2 @@
-MD5 (mediawiki-1.4.5.tar.gz) = 961e3083b1c036a301b24ac4e614b81b
-SIZE (mediawiki-1.4.5.tar.gz) = 1939746
+MD5 (mediawiki-1.4.6.tar.gz) = f4f82bd486756c279f0c1977b290ce3b
+SIZE (mediawiki-1.4.6.tar.gz) = 1981191

>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list