CVS commit: [pkgsrc-2017Q1] pkgsrc/www/mediawiki

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sun Apr  9 17:55:03 UTC 2017

Modified Files:
        pkgsrc/www/mediawiki [pkgsrc-2017Q1]: Makefile PLIST distinfo

Log Message:
Pullup ticket #5257 - requested by wen
www/mediawiki: security update

Revisions pulled up:
- www/mediawiki/Makefile                                        1.64
- www/mediawiki/PLIST                                           1.31
- www/mediawiki/distinfo                                        1.49

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Sun Apr  9 01:26:46 UTC 2017

   Modified Files:
           pkgsrc/www/mediawiki: Makefile PLIST distinfo

   Log Message:
   Update to 1.18.1

   Upstream changes:
   MediaWiki 1.28.1
   Changes since 1.28.0

       $wgRunJobsAsync is now false by default (T142751). This change
   only affects wikis with $wgJobRunRate > 0.
       Fix fatal from "WaitConditionLoop" not being found, experienced
   when a wiki has more than one database server setup.
       (T152717) Better escaping for PHP mail() command
       (T154670) A missing method causing the MySQL installer to fatal in
   rare circumstances was restored.
       (T154672) Un-deprecate ArticleAfterFetchContentObject hook.
       (T158766) Avoid SQL error on MSSQL when using selectRowCount()
       (T145635) Fix too long index error when installing with MSSQL
       (T156184) $wgRawHtml will no longer apply to internationalization messages.
       (T160519) CACHE_ANYTHING will not be CACHE_ACCEL if no accelerator
   is installed.
       (T154872) Fix incorrect ar_usertext_timestamp index names in new
   1.28 installs.
       (T109140) (T122209) SECURITY: Special:UserLogin and Special:Search
   allow redirect to interwiki links.
       (T144845) SECURITY: XSS in SearchHighlighter::highlightText() when
   $wgAdvancedSearchHighlighting is true.
       (T125177) SECURITY: API parameters may now be marked as
   "sensitive" to keep their values out of the logs.
       (T150044) SECURITY: "Mark all pages visited" on the watchlist now
   requires a CSRF token.
       (T156184) SECURITY: Escape content model/format url parameter in message.
       (T151735) SECURITY: SVG filter evasion using default attribute
   values in DTD declaration.
       (T161453) SECURITY: LocalisationCache will no longer use the
   temporary directory in it's fallback chain when trying to work out
   where to write the cache.
       (T48143) SECURITY: Spam blacklist ineffective on encoded URLs
   inside file inclusion syntax's link parameter.

   To generate a diff of this commit:
   cvs rdiff -u -r1.63 -r1.64 pkgsrc/www/mediawiki/Makefile
   cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/mediawiki/PLIST
   cvs rdiff -u -r1.48 -r1.49 pkgsrc/www/mediawiki/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.62 -r1.62.4.1 pkgsrc/www/mediawiki/Makefile
cvs rdiff -u -r1.30 -r1.30.4.1 pkgsrc/www/mediawiki/PLIST
cvs rdiff -u -r1.48 -r1.48.4.1 pkgsrc/www/mediawiki/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/mediawiki/Makefile
diff -u pkgsrc/www/mediawiki/Makefile:1.62 pkgsrc/www/mediawiki/Makefile:1.62.4.1
--- pkgsrc/www/mediawiki/Makefile:1.62  Sat Dec  3 03:06:50 2016
+++ pkgsrc/www/mediawiki/Makefile       Sun Apr  9 17:55:03 2017
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.62 2016/12/03 03:06:50 wen Exp $
+# $NetBSD: Makefile,v 1.62.4.1 2017/04/09 17:55:03 spz Exp $
 
 DISTNAME=      mediawiki-${VER}.${PVER}
 CATEGORIES=    www
@@ -23,7 +23,7 @@ INSTALLATION_DIRS=    ${EGDIR} share/mediaw
 .include "options.mk"
 
 VER=                   1.28
-PVER=                  0
+PVER=                  1
 
 APACHE_USER?=          www
 APACHE_GROUP?=         www

Index: pkgsrc/www/mediawiki/PLIST
diff -u pkgsrc/www/mediawiki/PLIST:1.30 pkgsrc/www/mediawiki/PLIST:1.30.4.1
--- pkgsrc/www/mediawiki/PLIST:1.30     Sat Dec  3 03:06:50 2016
+++ pkgsrc/www/mediawiki/PLIST  Sun Apr  9 17:55:03 2017
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.30 2016/12/03 03:06:50 wen Exp $
+@comment $NetBSD: PLIST,v 1.30.4.1 2017/04/09 17:55:03 spz Exp $
 share/examples/mediawiki/mediawiki.conf
 share/mediawiki/.stylelintrc
 share/mediawiki/COPYING
@@ -5242,6 +5242,7 @@ share/mediawiki/includes/specials/Specia
 share/mediawiki/includes/specials/SpecialFewestrevisions.php
 share/mediawiki/includes/specials/SpecialFileDuplicateSearch.php
 share/mediawiki/includes/specials/SpecialFilepath.php
+share/mediawiki/includes/specials/SpecialGoToInterwiki.php
 share/mediawiki/includes/specials/SpecialImport.php
 share/mediawiki/includes/specials/SpecialJavaScriptTest.php
 share/mediawiki/includes/specials/SpecialLinkAccounts.php
@@ -5543,6 +5544,7 @@ share/mediawiki/languages/i18n/eml.json
 share/mediawiki/languages/i18n/en-ca.json
 share/mediawiki/languages/i18n/en-gb.json
 share/mediawiki/languages/i18n/en.json
+share/mediawiki/languages/i18n/en.json.rej
 share/mediawiki/languages/i18n/eo.json
 share/mediawiki/languages/i18n/es.json
 share/mediawiki/languages/i18n/et.json
@@ -5722,6 +5724,7 @@ share/mediawiki/languages/i18n/ps.json
 share/mediawiki/languages/i18n/pt-br.json
 share/mediawiki/languages/i18n/pt.json
 share/mediawiki/languages/i18n/qqq.json
+share/mediawiki/languages/i18n/qqq.json.rej
 share/mediawiki/languages/i18n/qu.json
 share/mediawiki/languages/i18n/qug.json
 share/mediawiki/languages/i18n/rgn.json
@@ -6313,6 +6316,7 @@ share/mediawiki/maintenance/archives/pat
 share/mediawiki/maintenance/archives/patch-rd_interwiki.sql
 share/mediawiki/maintenance/archives/patch-recentchanges-utindex.sql
 share/mediawiki/maintenance/archives/patch-redirect.sql
+share/mediawiki/maintenance/archives/patch-rename-ar_usertext_timestamp.sql
 share/mediawiki/maintenance/archives/patch-rename-iwl_prefix.sql
 share/mediawiki/maintenance/archives/patch-rename-user_groups-and_rights.sql
 share/mediawiki/maintenance/archives/patch-rev_deleted.sql
@@ -6529,6 +6533,7 @@ share/mediawiki/maintenance/migrateUserG
 share/mediawiki/maintenance/minify.php
 share/mediawiki/maintenance/moveBatch.php
 share/mediawiki/maintenance/mssql/archives/patch-add-cl_collation_ext_index.sql
+share/mediawiki/maintenance/mssql/archives/patch-alter-table-oldimage.sql
 share/mediawiki/maintenance/mssql/archives/patch-archive-drop-fks.sql
 share/mediawiki/maintenance/mssql/archives/patch-bot_passwords.sql
 share/mediawiki/maintenance/mssql/archives/patch-categorylinks-constraints.sql
@@ -11378,6 +11383,7 @@ share/mediawiki/tests/phpunit/includes/m
 share/mediawiki/tests/phpunit/includes/media/WebPTest.php
 share/mediawiki/tests/phpunit/includes/media/XCFTest.php
 share/mediawiki/tests/phpunit/includes/objectcache/MemcachedBagOStuffTest.php
+share/mediawiki/tests/phpunit/includes/objectcache/ObjectCacheTest.php
 share/mediawiki/tests/phpunit/includes/objectcache/RESTBagOStuffTest.php
 share/mediawiki/tests/phpunit/includes/objectcache/RedisBagOStuffTest.php
 share/mediawiki/tests/phpunit/includes/page/ArticleTablesTest.php

Index: pkgsrc/www/mediawiki/distinfo
diff -u pkgsrc/www/mediawiki/distinfo:1.48 pkgsrc/www/mediawiki/distinfo:1.48.4.1
--- pkgsrc/www/mediawiki/distinfo:1.48  Sat Dec  3 03:06:50 2016
+++ pkgsrc/www/mediawiki/distinfo       Sun Apr  9 17:55:03 2017
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.48 2016/12/03 03:06:50 wen Exp $
+$NetBSD: distinfo,v 1.48.4.1 2017/04/09 17:55:03 spz Exp $
 
-SHA1 (mediawiki-1.28.0.tar.gz) = 72da503c40e1b9c6ad1a636902f0a2bb10830bc6
-RMD160 (mediawiki-1.28.0.tar.gz) = 9870fc5aa6e68c1659f4d191429f1d066bfd7d16
-SHA512 (mediawiki-1.28.0.tar.gz) = ff118b0a2229265be4b5d461d25d8df48faf5d1b1911aa76fa1ed2dffab0f41030df6b1ae61aad050916606fba81f90f5437b65631786c95ebfd273b331cbc27
-Size (mediawiki-1.28.0.tar.gz) = 32952240 bytes
+SHA1 (mediawiki-1.28.1.tar.gz) = ad9c013bff14fede90ebddf2b49bf7c1670710bf
+RMD160 (mediawiki-1.28.1.tar.gz) = e980993d8ec89a2aed2fedfd61d81bf3ed718bce
+SHA512 (mediawiki-1.28.1.tar.gz) = 5b422ed628643a9a575a53133e3626374ea81b0efaddb578c8ae9f90ac3bb4da4903bf983daca1db6c8dfa5da53c20163836edbb80b7476f20d18abe3946fb3d
+Size (mediawiki-1.28.1.tar.gz) = 32965341 bytes