FEDORA-2015-5511 — security update for mediawiki

stable

mediawiki-1.24.2-1.fc22

FEDORA-2015-5511 created by mooninite 8 years ago for Fedora 22

Changes since 1.24.1

(bug T85848, bug T71210) SECURITY: Don't parse XMP blocks that contain XML entities, to prevent various DoS attacks.
(bug T85848) SECURITY: Don't allow directly calling Xml::isWellFormed, to reduce likelihood of DoS.
(bug T88310) SECURITY: Always expand xml entities when checking SVG's.
(bug T73394) SECURITY: Escape > in Html::expandAttributes to prevent XSS.
(bug T85855) SECURITY: Don't execute another user's CSS or JS on preview.
(bug T64685) SECURITY: Allow setting maximal password length to prevent DoS when using PBKDF2.
(bug T85349, bug T85850, bug T86711) SECURITY: Multiple issues fixed in SVG filtering to prevent XSS and protect viewer's privacy.
Fix case of SpecialAllPages/SpecialAllMessages in SpecialPageFactory to fix loading these special pages when $wgAutoloadAttemptLowercase is false.
(bug T70087) Fix Special:ActiveUsers page for installations using PostgreSQL.
(bug T76254) Fix deleting of pages with PostgreSQL. Requires a schema change and running update.php to fix.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2015-5511

This update has been submitted for testing by mooninite.

8 years ago

taskotron commented 8 years ago

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/54659/steps/runtask/logs/stdio (results are informative only)

taskotron commented 8 years ago

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/54659/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 22 testing updates repository.

7 years ago

This update has been pushed to testing

7 years ago

This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been submitted for stable by mooninite.

7 years ago

taskotron commented 7 years ago

Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/56741/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 22 stable updates repository.

7 years ago

This update is currently being pushed to the Fedora 22 stable updates repository.

7 years ago

This update has been pushed to stable

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

mediawiki-1.24.2-1.fc22

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

7 years ago

in stable

7 years ago

BZ#1207901 mediawiki-1.24.2 is available

BZ#1208072 mediawiki: mediawiki: security issues fixed in the 1.24.2, 1.23.9, and 1.19.24 releases

BZ#1208073 mediawiki: mediawiki: security issues fixed in the 1.24.2, 1.23.9, and 1.19.24 releases [fedora-all]

mediawiki-1.24.2-1.fc22

Automated Test Results

None