Sat Feb 7 11:09:37 2009 UTC ()
Updated www/mediawiki to 1.13.4

A number of cross-site scripting (XSS) security vulnerabilities were
discovered in the web-based installer (config/index.php). These
vulnerabilities all require a live installer -- once the installer has been
used to install a wiki, it is deactivated.

Note that cross-site scripting vulnerabilities can be used to attack any
website in the same cookie domain. So if you have an uninstalled copy of
MediaWiki on the same site as an active web service, MediaWiki could be used
to attack the active service.  If you are hosting an old copy of MediaWiki
that you have never installed, we advise you to remove it from the web.


(martti)
diff -r1.3 -r1.4 pkgsrc/www/mediawiki/Makefile
diff -r1.2 -r1.3 pkgsrc/www/mediawiki/PLIST
diff -r1.2 -r1.3 pkgsrc/www/mediawiki/distinfo
cvs diff -r1.3 -r1.4 pkgsrc/www/mediawiki/Makefile (expand / switch to unified diff)

--- pkgsrc/www/mediawiki/Makefile 2008/12/15 11:54:34 1.3
+++ pkgsrc/www/mediawiki/Makefile 2009/02/07 11:09:37 1.4
@@ -1,31 +1,31 @@ @@ -1,31 +1,31 @@
1# $NetBSD: Makefile,v 1.3 2008/12/15 11:54:34 martti Exp $ 1# $NetBSD: Makefile,v 1.4 2009/02/07 11:09:37 martti Exp $
2 2
3DISTNAME= mediawiki-${VER}.${PVER} 3DISTNAME= mediawiki-${VER}.${PVER}
4CATEGORIES= www 4CATEGORIES= www
5MASTER_SITES= http://download.wikimedia.org/mediawiki/${VER}/ 5MASTER_SITES= http://download.wikimedia.org/mediawiki/${VER}/
6 6
7MAINTAINER= martti@NetBSD.org 7MAINTAINER= martti@NetBSD.org
8HOMEPAGE= http://www.mediawiki.org/ 8HOMEPAGE= http://www.mediawiki.org/
9COMMENT= Free software wiki package originally written for Wikipedia 9COMMENT= Free software wiki package originally written for Wikipedia
10#LICENSE= gnu-gpl-v2 10#LICENSE= gnu-gpl-v2
11 11
12DEPENDS+= ${PHP_PKG_PREFIX}-mysql>=4.3.10:../../databases/php-mysql 12DEPENDS+= ${PHP_PKG_PREFIX}-mysql>=4.3.10:../../databases/php-mysql
13 13
14.include "../../mk/bsd.prefs.mk" 14.include "../../mk/bsd.prefs.mk"
15 15
16PKG_INSTALLATION_TYPES= overwrite pkgviews 16PKG_INSTALLATION_TYPES= overwrite pkgviews
17VER= 1.13 17VER= 1.13
18PVER= 3 18PVER= 4
19 19
20APACHE_USER?= www 20APACHE_USER?= www
21APACHE_GROUP?= www 21APACHE_GROUP?= www
22BUILD_DEFS+= APACHE_USER APACHE_GROUP 22BUILD_DEFS+= APACHE_USER APACHE_GROUP
23 23
24PKG_SYSCONFSUBDIR?= httpd 24PKG_SYSCONFSUBDIR?= httpd
25MESSAGE_SUBST+= PKG_SYSCONFDIR=${PKG_SYSCONFDIR} 25MESSAGE_SUBST+= PKG_SYSCONFDIR=${PKG_SYSCONFDIR}
26 26
27EGDIR= ${PREFIX}/share/examples/mediawiki 27EGDIR= ${PREFIX}/share/examples/mediawiki
28MEDIAWIKI= ${PREFIX}/share/mediawiki 28MEDIAWIKI= ${PREFIX}/share/mediawiki
29 29
30CONF_FILES= ${EGDIR}/mediawiki.conf \ 30CONF_FILES= ${EGDIR}/mediawiki.conf \
31 ${PKG_SYSCONFDIR}/mediawiki.conf 31 ${PKG_SYSCONFDIR}/mediawiki.conf
cvs diff -r1.2 -r1.3 pkgsrc/www/mediawiki/PLIST (expand / switch to unified diff)

--- pkgsrc/www/mediawiki/PLIST 2008/12/15 11:54:34 1.2
+++ pkgsrc/www/mediawiki/PLIST 2009/02/07 11:09:37 1.3
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.2 2008/12/15 11:54:34 martti Exp $ 1@comment $NetBSD: PLIST,v 1.3 2009/02/07 11:09:37 martti Exp $
2share/examples/mediawiki/mediawiki.conf 2share/examples/mediawiki/mediawiki.conf
3share/mediawiki/AdminSettings.sample 3share/mediawiki/AdminSettings.sample
4share/mediawiki/COPYING 4share/mediawiki/COPYING
5share/mediawiki/FAQ 5share/mediawiki/FAQ
6share/mediawiki/HISTORY 6share/mediawiki/HISTORY
7share/mediawiki/INSTALL 7share/mediawiki/INSTALL
8share/mediawiki/Makefile 8share/mediawiki/Makefile
9share/mediawiki/README 9share/mediawiki/README
10share/mediawiki/RELEASE-NOTES 10share/mediawiki/RELEASE-NOTES
11share/mediawiki/StartProfiler.php 11share/mediawiki/StartProfiler.php
12share/mediawiki/UPGRADE 12share/mediawiki/UPGRADE
13share/mediawiki/api.php 13share/mediawiki/api.php
14share/mediawiki/api.php5 14share/mediawiki/api.php5
@@ -482,26 +482,27 @@ share/mediawiki/languages/messages/Messa @@ -482,26 +482,27 @@ share/mediawiki/languages/messages/Messa
482share/mediawiki/languages/messages/MessagesBat_smg.php 482share/mediawiki/languages/messages/MessagesBat_smg.php
483share/mediawiki/languages/messages/MessagesBcc.php 483share/mediawiki/languages/messages/MessagesBcc.php
484share/mediawiki/languages/messages/MessagesBcl.php 484share/mediawiki/languages/messages/MessagesBcl.php
485share/mediawiki/languages/messages/MessagesBe.php 485share/mediawiki/languages/messages/MessagesBe.php
486share/mediawiki/languages/messages/MessagesBe_tarask.php 486share/mediawiki/languages/messages/MessagesBe_tarask.php
487share/mediawiki/languages/messages/MessagesBe_x_old.php 487share/mediawiki/languages/messages/MessagesBe_x_old.php
488share/mediawiki/languages/messages/MessagesBg.php 488share/mediawiki/languages/messages/MessagesBg.php
489share/mediawiki/languages/messages/MessagesBh.php 489share/mediawiki/languages/messages/MessagesBh.php
490share/mediawiki/languages/messages/MessagesBi.php 490share/mediawiki/languages/messages/MessagesBi.php
491share/mediawiki/languages/messages/MessagesBm.php 491share/mediawiki/languages/messages/MessagesBm.php
492share/mediawiki/languages/messages/MessagesBn.php 492share/mediawiki/languages/messages/MessagesBn.php
493share/mediawiki/languages/messages/MessagesBo.php 493share/mediawiki/languages/messages/MessagesBo.php
494share/mediawiki/languages/messages/MessagesBpy.php 494share/mediawiki/languages/messages/MessagesBpy.php
 495share/mediawiki/languages/messages/MessagesBqi.php
495share/mediawiki/languages/messages/MessagesBr.php 496share/mediawiki/languages/messages/MessagesBr.php
496share/mediawiki/languages/messages/MessagesBs.php 497share/mediawiki/languages/messages/MessagesBs.php
497share/mediawiki/languages/messages/MessagesBug.php 498share/mediawiki/languages/messages/MessagesBug.php
498share/mediawiki/languages/messages/MessagesCa.php 499share/mediawiki/languages/messages/MessagesCa.php
499share/mediawiki/languages/messages/MessagesCbk_zam.php 500share/mediawiki/languages/messages/MessagesCbk_zam.php
500share/mediawiki/languages/messages/MessagesCdo.php 501share/mediawiki/languages/messages/MessagesCdo.php
501share/mediawiki/languages/messages/MessagesCe.php 502share/mediawiki/languages/messages/MessagesCe.php
502share/mediawiki/languages/messages/MessagesCeb.php 503share/mediawiki/languages/messages/MessagesCeb.php
503share/mediawiki/languages/messages/MessagesCh.php 504share/mediawiki/languages/messages/MessagesCh.php
504share/mediawiki/languages/messages/MessagesChr.php 505share/mediawiki/languages/messages/MessagesChr.php
505share/mediawiki/languages/messages/MessagesCo.php 506share/mediawiki/languages/messages/MessagesCo.php
506share/mediawiki/languages/messages/MessagesCrh.php 507share/mediawiki/languages/messages/MessagesCrh.php
507share/mediawiki/languages/messages/MessagesCrh_cyrl.php 508share/mediawiki/languages/messages/MessagesCrh_cyrl.php
@@ -616,26 +617,27 @@ share/mediawiki/languages/messages/Messa @@ -616,26 +617,27 @@ share/mediawiki/languages/messages/Messa
616share/mediawiki/languages/messages/MessagesLi.php 617share/mediawiki/languages/messages/MessagesLi.php
617share/mediawiki/languages/messages/MessagesLij.php 618share/mediawiki/languages/messages/MessagesLij.php
618share/mediawiki/languages/messages/MessagesLld.php 619share/mediawiki/languages/messages/MessagesLld.php
619share/mediawiki/languages/messages/MessagesLmo.php 620share/mediawiki/languages/messages/MessagesLmo.php
620share/mediawiki/languages/messages/MessagesLn.php 621share/mediawiki/languages/messages/MessagesLn.php
621share/mediawiki/languages/messages/MessagesLo.php 622share/mediawiki/languages/messages/MessagesLo.php
622share/mediawiki/languages/messages/MessagesLoz.php 623share/mediawiki/languages/messages/MessagesLoz.php
623share/mediawiki/languages/messages/MessagesLt.php 624share/mediawiki/languages/messages/MessagesLt.php
624share/mediawiki/languages/messages/MessagesLv.php 625share/mediawiki/languages/messages/MessagesLv.php
625share/mediawiki/languages/messages/MessagesMai.php 626share/mediawiki/languages/messages/MessagesMai.php
626share/mediawiki/languages/messages/MessagesMap_bms.php 627share/mediawiki/languages/messages/MessagesMap_bms.php
627share/mediawiki/languages/messages/MessagesMdf.php 628share/mediawiki/languages/messages/MessagesMdf.php
628share/mediawiki/languages/messages/MessagesMg.php 629share/mediawiki/languages/messages/MessagesMg.php
 630share/mediawiki/languages/messages/MessagesMhr.php
629share/mediawiki/languages/messages/MessagesMi.php 631share/mediawiki/languages/messages/MessagesMi.php
630share/mediawiki/languages/messages/MessagesMk.php 632share/mediawiki/languages/messages/MessagesMk.php
631share/mediawiki/languages/messages/MessagesMl.php 633share/mediawiki/languages/messages/MessagesMl.php
632share/mediawiki/languages/messages/MessagesMn.php 634share/mediawiki/languages/messages/MessagesMn.php
633share/mediawiki/languages/messages/MessagesMo.php 635share/mediawiki/languages/messages/MessagesMo.php
634share/mediawiki/languages/messages/MessagesMr.php 636share/mediawiki/languages/messages/MessagesMr.php
635share/mediawiki/languages/messages/MessagesMs.php 637share/mediawiki/languages/messages/MessagesMs.php
636share/mediawiki/languages/messages/MessagesMt.php 638share/mediawiki/languages/messages/MessagesMt.php
637share/mediawiki/languages/messages/MessagesMwl.php 639share/mediawiki/languages/messages/MessagesMwl.php
638share/mediawiki/languages/messages/MessagesMy.php 640share/mediawiki/languages/messages/MessagesMy.php
639share/mediawiki/languages/messages/MessagesMyv.php 641share/mediawiki/languages/messages/MessagesMyv.php
640share/mediawiki/languages/messages/MessagesMzn.php 642share/mediawiki/languages/messages/MessagesMzn.php
641share/mediawiki/languages/messages/MessagesNa.php 643share/mediawiki/languages/messages/MessagesNa.php
@@ -652,41 +654,44 @@ share/mediawiki/languages/messages/Messa @@ -652,41 +654,44 @@ share/mediawiki/languages/messages/Messa
652share/mediawiki/languages/messages/MessagesNo.php 654share/mediawiki/languages/messages/MessagesNo.php
653share/mediawiki/languages/messages/MessagesNov.php 655share/mediawiki/languages/messages/MessagesNov.php
654share/mediawiki/languages/messages/MessagesNso.php 656share/mediawiki/languages/messages/MessagesNso.php
655share/mediawiki/languages/messages/MessagesNv.php 657share/mediawiki/languages/messages/MessagesNv.php
656share/mediawiki/languages/messages/MessagesNy.php 658share/mediawiki/languages/messages/MessagesNy.php
657share/mediawiki/languages/messages/MessagesOc.php 659share/mediawiki/languages/messages/MessagesOc.php
658share/mediawiki/languages/messages/MessagesOr.php 660share/mediawiki/languages/messages/MessagesOr.php
659share/mediawiki/languages/messages/MessagesOs.php 661share/mediawiki/languages/messages/MessagesOs.php
660share/mediawiki/languages/messages/MessagesPa.php 662share/mediawiki/languages/messages/MessagesPa.php
661share/mediawiki/languages/messages/MessagesPag.php 663share/mediawiki/languages/messages/MessagesPag.php
662share/mediawiki/languages/messages/MessagesPam.php 664share/mediawiki/languages/messages/MessagesPam.php
663share/mediawiki/languages/messages/MessagesPap.php 665share/mediawiki/languages/messages/MessagesPap.php
664share/mediawiki/languages/messages/MessagesPdc.php 666share/mediawiki/languages/messages/MessagesPdc.php
 667share/mediawiki/languages/messages/MessagesPdt.php
665share/mediawiki/languages/messages/MessagesPfl.php 668share/mediawiki/languages/messages/MessagesPfl.php
666share/mediawiki/languages/messages/MessagesPi.php 669share/mediawiki/languages/messages/MessagesPi.php
667share/mediawiki/languages/messages/MessagesPih.php 670share/mediawiki/languages/messages/MessagesPih.php
668share/mediawiki/languages/messages/MessagesPl.php 671share/mediawiki/languages/messages/MessagesPl.php
669share/mediawiki/languages/messages/MessagesPms.php 672share/mediawiki/languages/messages/MessagesPms.php
 673share/mediawiki/languages/messages/MessagesPnb.php
670share/mediawiki/languages/messages/MessagesPnt.php 674share/mediawiki/languages/messages/MessagesPnt.php
671share/mediawiki/languages/messages/MessagesPs.php 675share/mediawiki/languages/messages/MessagesPs.php
672share/mediawiki/languages/messages/MessagesPt.php 676share/mediawiki/languages/messages/MessagesPt.php
673share/mediawiki/languages/messages/MessagesPt_br.php 677share/mediawiki/languages/messages/MessagesPt_br.php
674share/mediawiki/languages/messages/MessagesQu.php 678share/mediawiki/languages/messages/MessagesQu.php
675share/mediawiki/languages/messages/MessagesRif.php 679share/mediawiki/languages/messages/MessagesRif.php
676share/mediawiki/languages/messages/MessagesRm.php 680share/mediawiki/languages/messages/MessagesRm.php
677share/mediawiki/languages/messages/MessagesRmy.php 681share/mediawiki/languages/messages/MessagesRmy.php
678share/mediawiki/languages/messages/MessagesRo.php 682share/mediawiki/languages/messages/MessagesRo.php
679share/mediawiki/languages/messages/MessagesRoa_rup.php 683share/mediawiki/languages/messages/MessagesRoa_rup.php
 684share/mediawiki/languages/messages/MessagesRoa_tara.php
680share/mediawiki/languages/messages/MessagesRu.php 685share/mediawiki/languages/messages/MessagesRu.php
681share/mediawiki/languages/messages/MessagesRuq.php 686share/mediawiki/languages/messages/MessagesRuq.php
682share/mediawiki/languages/messages/MessagesRuq_cyrl.php 687share/mediawiki/languages/messages/MessagesRuq_cyrl.php
683share/mediawiki/languages/messages/MessagesRuq_grek.php 688share/mediawiki/languages/messages/MessagesRuq_grek.php
684share/mediawiki/languages/messages/MessagesRuq_latn.php 689share/mediawiki/languages/messages/MessagesRuq_latn.php
685share/mediawiki/languages/messages/MessagesSa.php 690share/mediawiki/languages/messages/MessagesSa.php
686share/mediawiki/languages/messages/MessagesSah.php 691share/mediawiki/languages/messages/MessagesSah.php
687share/mediawiki/languages/messages/MessagesSc.php 692share/mediawiki/languages/messages/MessagesSc.php
688share/mediawiki/languages/messages/MessagesScn.php 693share/mediawiki/languages/messages/MessagesScn.php
689share/mediawiki/languages/messages/MessagesSco.php 694share/mediawiki/languages/messages/MessagesSco.php
690share/mediawiki/languages/messages/MessagesSd.php 695share/mediawiki/languages/messages/MessagesSd.php
691share/mediawiki/languages/messages/MessagesSdc.php 696share/mediawiki/languages/messages/MessagesSdc.php
692share/mediawiki/languages/messages/MessagesSe.php 697share/mediawiki/languages/messages/MessagesSe.php
@@ -704,26 +709,27 @@ share/mediawiki/languages/messages/Messa @@ -704,26 +709,27 @@ share/mediawiki/languages/messages/Messa
704share/mediawiki/languages/messages/MessagesSq.php 709share/mediawiki/languages/messages/MessagesSq.php
705share/mediawiki/languages/messages/MessagesSr.php 710share/mediawiki/languages/messages/MessagesSr.php
706share/mediawiki/languages/messages/MessagesSr_ec.php 711share/mediawiki/languages/messages/MessagesSr_ec.php
707share/mediawiki/languages/messages/MessagesSr_el.php 712share/mediawiki/languages/messages/MessagesSr_el.php
708share/mediawiki/languages/messages/MessagesSrn.php 713share/mediawiki/languages/messages/MessagesSrn.php
709share/mediawiki/languages/messages/MessagesSs.php 714share/mediawiki/languages/messages/MessagesSs.php
710share/mediawiki/languages/messages/MessagesSt.php 715share/mediawiki/languages/messages/MessagesSt.php
711share/mediawiki/languages/messages/MessagesStq.php 716share/mediawiki/languages/messages/MessagesStq.php
712share/mediawiki/languages/messages/MessagesSu.php 717share/mediawiki/languages/messages/MessagesSu.php
713share/mediawiki/languages/messages/MessagesSv.php 718share/mediawiki/languages/messages/MessagesSv.php
714share/mediawiki/languages/messages/MessagesSw.php 719share/mediawiki/languages/messages/MessagesSw.php
715share/mediawiki/languages/messages/MessagesSzl.php 720share/mediawiki/languages/messages/MessagesSzl.php
716share/mediawiki/languages/messages/MessagesTa.php 721share/mediawiki/languages/messages/MessagesTa.php
 722share/mediawiki/languages/messages/MessagesTcy.php
717share/mediawiki/languages/messages/MessagesTe.php 723share/mediawiki/languages/messages/MessagesTe.php
718share/mediawiki/languages/messages/MessagesTet.php 724share/mediawiki/languages/messages/MessagesTet.php
719share/mediawiki/languages/messages/MessagesTg.php 725share/mediawiki/languages/messages/MessagesTg.php
720share/mediawiki/languages/messages/MessagesTg_cyrl.php 726share/mediawiki/languages/messages/MessagesTg_cyrl.php
721share/mediawiki/languages/messages/MessagesTh.php 727share/mediawiki/languages/messages/MessagesTh.php
722share/mediawiki/languages/messages/MessagesTi.php 728share/mediawiki/languages/messages/MessagesTi.php
723share/mediawiki/languages/messages/MessagesTk.php 729share/mediawiki/languages/messages/MessagesTk.php
724share/mediawiki/languages/messages/MessagesTl.php 730share/mediawiki/languages/messages/MessagesTl.php
725share/mediawiki/languages/messages/MessagesTlh.php 731share/mediawiki/languages/messages/MessagesTlh.php
726share/mediawiki/languages/messages/MessagesTn.php 732share/mediawiki/languages/messages/MessagesTn.php
727share/mediawiki/languages/messages/MessagesTo.php 733share/mediawiki/languages/messages/MessagesTo.php
728share/mediawiki/languages/messages/MessagesTokipona.php 734share/mediawiki/languages/messages/MessagesTokipona.php
729share/mediawiki/languages/messages/MessagesTp.php 735share/mediawiki/languages/messages/MessagesTp.php
cvs diff -r1.2 -r1.3 pkgsrc/www/mediawiki/distinfo (expand / switch to unified diff)

--- pkgsrc/www/mediawiki/distinfo 2008/12/15 11:54:34 1.2
+++ pkgsrc/www/mediawiki/distinfo 2009/02/07 11:09:37 1.3
@@ -1,5 +1,5 @@ @@ -1,5 +1,5 @@
1$NetBSD: distinfo,v 1.2 2008/12/15 11:54:34 martti Exp $ 1$NetBSD: distinfo,v 1.3 2009/02/07 11:09:37 martti Exp $
2 2
3SHA1 (mediawiki-1.13.3.tar.gz) = e6b19d170629c8657742236b9f827a6df0350efd 3SHA1 (mediawiki-1.13.4.tar.gz) = 8b9b9761a46309359bba76e3a28521449a90c00f
4RMD160 (mediawiki-1.13.3.tar.gz) = 643d18503d0fccfe97d0916b871813863bc3131f 4RMD160 (mediawiki-1.13.4.tar.gz) = fe71678384906bfd3d0bdd1d0bd0a0e4b86e95f9
5Size (mediawiki-1.13.3.tar.gz) = 9252548 bytes 5Size (mediawiki-1.13.4.tar.gz) = 9423425 bytes