[mediawiki/f19] Update to 1.23.8

mooninite mooninite at fedoraproject.org
Thu Dec 18 17:53:05 UTC 2014


commit aaf3b2bb0201964489ec91a5d9f6dad77dfc31ea
Author: Michael Cronenworth <mike at cchtml.com>
Date:   Thu Dec 18 11:49:26 2014 -0600

    Update to 1.23.8

 .gitignore     |    2 +-
 mediawiki.spec |    8 +++++++-
 sources        |    2 +-
 3 files changed, 9 insertions(+), 3 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 62b759b..fd8bdb0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-/mediawiki-1.23.7.tar.gz
+/mediawiki-1.23.8.tar.gz
diff --git a/mediawiki.spec b/mediawiki.spec
index 8bdd145..ebc8330 100644
--- a/mediawiki.spec
+++ b/mediawiki.spec
@@ -1,6 +1,6 @@
 Summary: A wiki engine
 Name: mediawiki
-Version: 1.23.7
+Version: 1.23.8
 Release: 1%{?dist}
 License: GPLv2+
 URL: http://www.mediawiki.org/
@@ -117,6 +117,12 @@ echo /var/www/wiki > %{buildroot}%{_sysconfdir}/mediawiki/instances
 
 
 %changelog
+* Thu Dec 18 2014 Michael Cronenworth <mike at cchtml.com> - 1.23.8-1
+- Update to 1.23.8
+- (bug T76686) [SECURITY] thumb.php outputs wikitext message as raw HTML, which could lead to xss. Permission to edit MediaWiki namespace is required to exploit this.
+- (bug T77028) [SECURITY] Malicious site can bypass CORS restrictions in $wgCrossSiteAJAXdomains in API calls if it only included an allowed domain as part of its name.
+- (bug T74222) The original patch for T74222 was reverted as unnecessary.
+
 * Fri Nov 28 2014 Michael Cronenworth <mike at cchtml.com> - 1.23.7-1
 - Update to 1.23.7
 - Release notes: http://www.mediawiki.org/wiki/Release_notes/1.23#MediaWiki_1.23.7
diff --git a/sources b/sources
index 7311c12..1cbb2d7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-f0c7135d8b4b5048e42559176ffb8bf7  mediawiki-1.23.7.tar.gz
+529e003d59be04d925da853a54794070  mediawiki-1.23.8.tar.gz


More information about the scm-commits mailing list