[mediawiki119/el6] Update to 1.19.12

Patrick Uiterwijk puiterwijk at fedoraproject.org
Fri Feb 28 22:16:10 UTC 2014


commit dfb606b6696bc5f58ebddc4d0a1496da19195f4f
Author: Patrick Uiterwijk <puiterwijk at redhat.com>
Date:   Fri Feb 28 23:17:00 2014 +0100

    Update to 1.19.12
    
    - (bug 60771) SECURITY: Disallow uploading SVG files using non-whitelisted namespaces. Also disallow iframe elements. User will get an error including the namespace name if they use a non- whitelisted namespace.
    - (bug 61346) SECURITY: Make token comparison use constant time. It seems like our token comparison would be vulnerable to timing attacks. This will take constant time.

 .gitignore        |    1 +
 mediawiki119.spec |    9 +++++++--
 sources           |    3 +--
 3 files changed, 9 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index e84a3d9..ec5c5cc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,4 @@
 /mediawiki-1.19.10.tar.gz.sig
 /mediawiki-1.19.11.tar.gz
 /mediawiki-1.19.11.tar.gz.sig
+/mediawiki-1.19.12.tar.gz
diff --git a/mediawiki119.spec b/mediawiki119.spec
index 2896423..fee9a9a 100644
--- a/mediawiki119.spec
+++ b/mediawiki119.spec
@@ -3,8 +3,8 @@
 
 Summary: A wiki engine
 Name:    mediawiki119
-Version: 1.19.11
-Release: 2%{?dist}
+Version: 1.19.12
+Release: 1%{?dist}
 License: GPLv2+ and public domain and CC-BY-SA
 Group:   Development/Tools
 URL:     http://www.mediawiki.org/
@@ -115,6 +115,11 @@ rm -rf %{buildroot}
 
 
 %changelog
+* Fri Feb 28 2014 Patrick Uiterwijk (LOCAL) <puiterwijk at redhat.com> - 1.19.12-1
+- Update to 1.19.12
+- (bug 60771) SECURITY: Disallow uploading SVG files using non-whitelisted namespaces. Also disallow iframe elements. User will get an error including the namespace name if they use a non- whitelisted namespace.
+- (bug 61346) SECURITY: Make token comparison use constant time. It seems like our token comparison would be vulnerable to timing attacks. This will take constant time.
+
 * Tue Jan 28 2014 Patrick Uiterwijk <puiterwijk at redhat.com> - 1.19.11-2
 - Provide mediawiki (mainly for EL5)
 
diff --git a/sources b/sources
index 91cbbfe..488dfbe 100644
--- a/sources
+++ b/sources
@@ -1,2 +1 @@
-57aac78089efaed18c1c0059db1b306b  mediawiki-1.19.11.tar.gz
-ed6b39f15f5d4f763224e4d002eaa229  mediawiki-1.19.11.tar.gz.sig
+16c0923b0b7877cb515bfde60cd0d79e  mediawiki-1.19.12.tar.gz


More information about the scm-commits mailing list