[mediawiki] Update to 1.24.1

mooninite mooninite at fedoraproject.org
Thu Dec 18 17:34:56 UTC 2014


commit 47fa95c0f15ce59786d75f3e3ee5f368407868e1
Author: Michael Cronenworth <mike at cchtml.com>
Date:   Thu Dec 18 11:34:39 2014 -0600

    Update to 1.24.1

 .gitignore     |    3 +--
 mediawiki.spec |   11 ++++++++++-
 sources        |    2 +-
 3 files changed, 12 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 17e8a1c..d7f6378 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1 @@
-/mediawiki-1.23.6.tar.gz
-/mediawiki-1.24.0.tar.gz
+/mediawiki-1.24.1.tar.gz
diff --git a/mediawiki.spec b/mediawiki.spec
index fe71702..12ac01c 100644
--- a/mediawiki.spec
+++ b/mediawiki.spec
@@ -1,6 +1,6 @@
 Summary: A wiki engine
 Name: mediawiki
-Version: 1.24.0
+Version: 1.24.1
 Release: 1%{?dist}
 License: GPLv2+
 URL: http://www.mediawiki.org/
@@ -117,6 +117,15 @@ echo /var/www/wiki > %{buildroot}%{_sysconfdir}/mediawiki/instances
 
 
 %changelog
+* Thu Dec 18 2014 Michael Cronenworth <mike at cchtml.com> - 1.24.1-1
+- Update to 1.24.1
+- (bug T76686) [SECURITY] thumb.php outputs wikitext message as raw HTML, which could lead to xss. Permission to edit MediaWiki namespace is required to exploit this.
+- (bug T77028) [SECURITY] Malicious site can bypass CORS restrictions in $wgCrossSiteAJAXdomains in API calls if it only included an allowed domain as part of its name.
+- (bug T74222) The original patch for T74222 was reverted as unnecessary.
+- Fixed a couple of entries in RELEASE-NOTES-1.24.
+- (bug T76168) OutputPage: Add accessors for some protected properties.
+- (bug T74834) Make 1.24 branch directly installable under PostgreSQL.
+
 * Fri Nov 28 2014 Michael Cronenworth <mike at cchtml.com> - 1.24.0-1
 - Update to 1.24.0
 - Release notes: http://www.mediawiki.org/wiki/Release_notes/1.24
diff --git a/sources b/sources
index be812c9..86ee969 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-66e22b1c48a54617474b9561a9d92437  mediawiki-1.24.0.tar.gz
+fb1a48c777c17df8f20a95061b3a483c  mediawiki-1.24.1.tar.gz


More information about the scm-commits mailing list