CVS commit: pkgsrc/www/mediawiki

["OBATA Akio" <obache%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   obache
Date:           Fri Jan 13 11:27:17 UTC 2012

Modified Files:
        pkgsrc/www/mediawiki: Makefile PLIST distinfo

Log Message:
Update mediawiki to 1.17.2.

== MediaWiki 1.17.2 ==
2012-01-11

This a maintenance and security release of the MediaWiki 1.17 branch.

=== Security changes ===
* (bug 33117) prop=revisions allows deleted text to be exposed through cache 
pollution.

=== Changes since 1.17.1 ===
* (bug 32709) Private Wiki users were always taken to Special:Badtitle on login.

== MediaWiki 1.17.1 ==

2011-11-24

This a maintenance and security release of the MediaWiki 1.17 branch.

=== Security changes ===
* (bug 32276) Skins were generating output using the internal page title which
  would allow anonymous users to determine wheter a page exists, potentially
  leaking private data. In fact, the curid and oldid request parameters would
  allow page titles to be enumerated even when they are not guessable.
* (bug 32616) action=ajax requests were dispatched to the relevant internal
  functions without any read permission checks being done. This could lead to
  data leakage on private wikis.


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 pkgsrc/www/mediawiki/Makefile
cvs rdiff -u -r1.6 -r1.7 pkgsrc/www/mediawiki/PLIST
cvs rdiff -u -r1.10 -r1.11 pkgsrc/www/mediawiki/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.