stable

mediawiki-1.24.2-1.fc22

FEDORA-2015-5511 created by mooninite 9 years ago for Fedora 22

Changes since 1.24.1

  • (bug T85848, bug T71210) SECURITY: Don't parse XMP blocks that contain XML entities, to prevent various DoS attacks.
  • (bug T85848) SECURITY: Don't allow directly calling Xml::isWellFormed, to reduce likelihood of DoS.
  • (bug T88310) SECURITY: Always expand xml entities when checking SVG's.
  • (bug T73394) SECURITY: Escape > in Html::expandAttributes to prevent XSS.
  • (bug T85855) SECURITY: Don't execute another user's CSS or JS on preview.
  • (bug T64685) SECURITY: Allow setting maximal password length to prevent DoS when using PBKDF2.
  • (bug T85349, bug T85850, bug T86711) SECURITY: Multiple issues fixed in SVG filtering to prevent XSS and protect viewer's privacy.
  • Fix case of SpecialAllPages/SpecialAllMessages in SpecialPageFactory to fix loading these special pages when $wgAutoloadAttemptLowercase is false.
  • (bug T70087) Fix Special:ActiveUsers page for installations using PostgreSQL.
  • (bug T76254) Fix deleting of pages with PostgreSQL. Requires a schema change and running update.php to fix.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-5511

This update has been submitted for testing by mooninite.

9 years ago

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/54659/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/54659/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 22 testing updates repository.

9 years ago

This update has been pushed to testing

9 years ago

This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

This update has been submitted for stable by mooninite.

9 years ago

Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/56741/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 22 stable updates repository.

9 years ago

This update is currently being pushed to the Fedora 22 stable updates repository.

9 years ago

This update has been pushed to stable

9 years ago

Please login to add feedback.

Metadata
Type
security
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
9 years ago
in testing
9 years ago
in stable
9 years ago
BZ#1207901 mediawiki-1.24.2 is available
0
0
BZ#1208072 mediawiki: mediawiki: security issues fixed in the 1.24.2, 1.23.9, and 1.19.24 releases
0
0
BZ#1208073 mediawiki: mediawiki: security issues fixed in the 1.24.2, 1.23.9, and 1.19.24 releases [fedora-all]
0
0

Automated Test Results