Changelog for
mediawiki-1.21.1-1.1.noarch.rpm :
Tue Jun 11 14:00:00 2013 jweberhoferAATTweberhofer.at
- Updated to release 1.21.1
* An incorrect version number was used for 1.21.0.
1.21.1 has the correct number.
* A problem with the Oracle SQL table creation was fixed.
* PdfHandler extension: Fix warning if pdfinfo fails but pdftext succeeds.
Mon May 27 14:00:00 2013 jweberhoferAATTweberhofer.at
- Updated to release 1.21.0
* The full release notes can be found here:
Updated to release candidate 1.21.0
- Highlights:
* Clearer email notifications
* The CologneBlue skin has been refactored
* ContentHandler: As part of the Wikidata initiative, 1.21 adopts an
extensible framework (\"ContentHandler\") so that pages can contain something
other than wikitext.
* Support for high DPI displays
* Ajax patrolling: With this new feature, users can mark revisions or pages
as having been \"patrolled\" with a single click while staying on the current
page.
* Improved Internationalization
* It\'s now easier to create accounts for other users by sending a temporary
password via e-mail
* More wikitext now supported in JavaScript messages
* Using semantic headings for the navigation menu
* Extended collation support
* Newly bundled extensions
- Cite
- ImageMap
- Interwiki
- Title Blacklist
- SpamBlacklist
- Poem
- InputBox
- LocalisationUpdate
- SyntaxHighlight GeSHi
Tue Apr 2 14:00:00 2013 jweberhoferAATTweberhofer.at
- Updated to release candidate 1.21.0rc1
Mon Mar 4 13:00:00 2013 jweberhoferAATTweberhofer.at
- Maintenance release 1.20.3
* New preference type - \'api\'. Preferences of this type are not shown on
Special:Preferences, but are still available via the action=options API.
* #44010 Context is passed to UserGetLanguageObject.
* The recursion guard on RequestContext::getLanguage() was weakened.
* #40585 Don\'t drop \'step=\"any\"\' in HTML input fields.
* #44024 Fixed problems in ObjectCache when using XCache.
* #44135 Fixed problems in CurlHttpRequest that caused InstantCommons
to longer work by default.
* #44010 FauxRequest leaked cookie data from primary request.
Wed Dec 5 13:00:00 2012 jweberhoferAATTweberhofer.at
- Maintenance release 1.20.2
* #42638 Fixes action=options&reset=1 in the API, and fixes unit tests.
* #42370 Fixes backport of 60cc060 to use mDoneWrites instead of
mTrxDoneWrites.
Fri Nov 30 13:00:00 2012 jweberhoferAATTweberhofer.at
- Security release 1.20.1
* #42202: Validate options to prevent html injection
* #40995: Prevent session fixation in Special:UserLogin (CVE-2012-5391)
* #41400: Prevent linker regex from exceeding PCRE backtrack limit
* #40632: Remove CleanupPresentationalAttributes feature
* Javscript Lint fixes
* [Database] Fixed case where trx idle callbacks might be lost.
Wed Nov 7 13:00:00 2012 jweberhoferAATTweberhofer.at
- openSUSE distribution:
* simplified Apache configuration, using /w/ and /wiki/
directories
* updated documentation
* there was a change in handling file-uploads. See:
README.DISTRIBUTION.
- Minimum PHP version is now 5.3.2.
- New diff view, greatly improved in clarity especially for
whitespace and other small changes and color-blind users.
- New special page Special:MostInterwikis.
- New magic word {{PAGEID}} which gives the current page ID.
- The info action has been reimplemented.
- Internationalization:
* New languages supported: Emilian (egl), Tornedalen Finnish (fit),
Mizo (lus), Santali (sat), Turoyo (tru)
* New Cyrillic-Latin language converter for Uzbek (uz)
Mon Oct 22 14:00:00 2012 jweberhoferAATTweberhofer.at
- Update documentation (thanks to Platonides)
- Simplyfied Alias-Configuration,
seperated pages (/wiki) and resources (/w)
Thu Sep 6 14:00:00 2012 jweberhoferAATTweberhofer.at
- Fixed requires ImageMagick-Magick++ --> ImageMagick; the old
requirement was incomplete.
Fri Aug 31 14:00:00 2012 jweberhoferAATTweberhofer.at
- Security release 1.19.2
* bug #39700: File: link to non-existing file can inject html
* bug #39823: Hidden block text leaking to admins
* bug #39184: LDAP password leakage
* bug #39180: Disallow framing of api results
* bug #37587: Enforce language codes to be html safe
* bug #39824: Check global blocks on account creation
Mon Jun 25 14:00:00 2012 jweberhoferAATTweberhofer.at
- Release 1.19.1
* (bug 36568) Fixed \"Illegal string offset \'LIMIT\'\" warnings in updater
* (bug 36938) Correctly escape uselang attribute to prevent xss
* Expanded Blacklist for SVG Files
Fri May 4 14:00:00 2012 jweberhoferAATTweberhofer.at
- Added /extensions folder to the Apache Alias Configuration
Thu May 3 14:00:00 2012 jweberhoferAATTweberhofer.at
- Release 1.19.0
* Bumped MySQL version requirement to 5.0.2.
* Disable the partial HTML and MathML rendering options for Math,
and render as PNG by default.
* MathML mode was so incomplete most people thought it simply didn\'t work.
* New skins/common/
*.css files usable by skins instead of having to copy
piles of generic styles from MonoBook or Vector\'s css.
* The default user signature now contains a talk link in addition to the
user link.
* Searching blocked usernames in block log is now clearer.
* Better timezone recognition in user preferences.
* Extensions can now participate in the extraction of titles from URL paths.
* The command-line installer supports various RDBMSes better.
* The interwiki links table can now be accessed also when the interwiki
cache is used (used in the API and the Interwiki extension).
* More gender support (for instance in user lists).
* Add languages: Canadian English.
* Language converter improved, e.g. it now works depending on the page
content language.
* Time and number-formatting magic words also now depend on the page
content language.
* Bidirectional support further improved after 1.18.
- #36475 - Generating thumbnails does not work when there is no access to /tmp
Wed May 2 14:00:00 2012 jweberhoferAATTweberhofer.at
- Security release 1.18.3
* (bug 35446) Using \"{{nse:}}\" with an invalid namespace name no longer throws
a PHP warning.
* (bug 35567) The whole password reminder e-mail is now sent in the same language.
* (bug 35961) Hash comparison should always be strict.
* (bug 35671) PHP Notice: Undefined index: gettoken in includes/api/ApiMain.php
on line 598.
* Fix broken email confirmation expiration caused by MWCryptRand changes.
Fri Mar 23 13:00:00 2012 jweberhoferAATTweberhofer.at
- Security release 1.18.2
* #33686 could not get a list of contributor for an article when using
a SQLite database.
* #33865 Exception thrown in action=parse when attempting to use the title
parameter without setting the text parameter.
* UserMailer could potentially throw a fatal error when a MailAddress object had
an empty email address.
* #33087 Exchange server rejected mail sent by MediaWiki
* #34528 Edit section tooltips show correction section name again
* #34246 MediaWiki:Whatlinkshere-summary message is displayed again in
Special:Whatlinkshere
* #22555 Remove or skip strip markers from tag hooks like <nowiki> in
core parser functions which operate on strings, such as formatnum.
* #34212 ApiBlock/ApiUnblock allow action to take place without a token
parameter present.
* #34907 Fixed exposure of tokens through load.php that could have facilitated
CSRF attacks.
* #35317 CSRF in Special:Upload.
Wed Feb 1 13:00:00 2012 jweberhoferAATTweberhofer.at
- Improved extension handling (use a seperate directory)
- Improved scripts, fixed some minor bugs
- Improved handling of old extension replacement
Tue Jan 31 13:00:00 2012 jweberhoferAATTweberhofer.at
- Fixed bug 32486 - WebRequest::getPathInfo() broken in img_auth.php on DreamHost (edit)
Wed Jan 11 13:00:00 2012 jweberhoferAATTweberhofer.at
- 1.18.1
* (bug 33117) prop=revisions allows deleted text to be exposed through cache pollution.
* (bug 32712) Fix for search indexing of pages with certain unicode chars following URL.
* (bug 3901) Lang, hreflang attribs added to sidebar interlanguage links for screen readers.
* (bug 30774) mediawiki.html: Add support for numbers and booleans in the
attribute values and element contents.
* (bug 32473) [[Special:PasswordReset]] can not be used on private wiki.
* (bug 32853) Fixed CACHE_DBA object cache type.
* (bug 32786) Backward compatibility for extension using 1.17\'s Database::newFromType().
* Fixed exception when using Special:WhatLinksHere on a Media: file.
* (bug 32709) Private Wiki users were always taken to Special:Badtitle on login.
* (bug 33240) Sort images are missing but referenced in css.
* (bug 31921) Magic words REVISIONDAY, REVISIONMONTH and REVISIONYEAR were
not showing their values on preview.
* (bug 32702) Removed method Skin::makeGlobalVariablesScript() has been readded
for backward compatibility.
* (bug 30172) The check for posix_isatty() in maintenance scripts did not detect
when the function exists but is disabled. Introduced Maintenance::posix_isatty().
* (bug 33305) Make mw.util.addCSS resistant to IE\'s AATTfont-face bug by setting
cssText after DOM insertion.
* (bug 29102) Upgrades no longer fail with the error \"Unknown character set: \'mysql4\'.
* (bug 25355) Parser generates edit section links for special pages.
* (bug 33321) Adding a line to MediaWiki:Sidebar that contains a pipe, but doesn\'t
have any pipes after being transformed by MessageCache, causes exception on
all pages.
* Fixed recentchanges FK violation on page delete and cache purge error in updater
for Oracle DB.
Mon Dec 19 13:00:00 2011 jweberhoferAATTweberhofer.at
- Fixed a update.sh script error
Wed Nov 30 13:00:00 2011 jweberhoferAATTweberhofer.at
- Updated Math-installation description
Tue Nov 29 13:00:00 2011 jweberhoferAATTweberhofer.at
- 1.18.0
* jQuery 1.6.4 is now included as standard
* action=watch / action=unwatch now requires a token
* Included Extensions:
- ConfirmEdit
- Gadgets
- Nuke
- ParserFunctions
- Renameuser
- Vector
- WikiEditor
* Better gender support
* Improved file metadata support
* Improved directionality support
* Easily find where to customize interface messages
* New plugin for collapsible elements
* Protocol-relative URLs
* More personalisable styles and scripts
* $wgEnableDublinCoreRdf and $wgEnableCreativeCommonsRdf
no longer work in core
* $wgUseTeX has been superseded by the Math extension
* New languages
The full announement can be found at
http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000105.html
Tue Nov 29 13:00:00 2011 jweberhoferAATTweberhofer.at
- 1.17.1
* (bug 32276) Page titles on private wikis are exposed with
index.php?curid=
* (bug 32616) - action=ajax bypasses read permissions
Mon Oct 10 14:00:00 2011 opendevelAATTweberhofer.at
- Improved documentation
- Moved texvc to the /usr/bin directory
- Improved pre-configuration
- Fixed some paths which changed with Mediawiki 1.17
- Improved makealias.sh script
Tue Jul 5 14:00:00 2011 opendevelAATTweberhofer.at
- Fixed Bug 29531 - r89628 breaks img_auth.php
Sun Jul 3 14:00:00 2011 opendevelAATTweberhofer.at
- improved update script
Wed Jun 22 14:00:00 2011 opendevelAATTweberhofer.at
- 1.17.0
* Fixed syntax error in generated LocalSettings.php when a non-default
user rights profile is chosen.
* (bug 29399) Fixed PostgreSQL installation when the DB user for
installation is the same as the one for web access.
* (bug 29233) Fixed failover for DB slave servers. When a DB slave
went down, an error was immediately shown to the user, instead of
trying another slave. Was broken since 1.17 beta 1.
* (bug 29278) Fixed PHP fatal error when attempting to add text to a
page via a redirect.
* (bug 29408) Fixed uploads of files with MIME types that aren\'t
detected by MediaWiki.
Wed Jun 15 14:00:00 2011 opendevelAATTweberhofer.at
- fixed a bug related to the texvc-configuration
- included patch to fix update on oss 11.4
Wed Jun 15 14:00:00 2011 opendevelAATTweberhofer.at
- 1.17.0rc1
* A new installer has been introduced.
* ResourceLoader, a new framework for delivering client-side resources
such as JavaScript and CSS, has been introduced.
* Category sorting has been improved.
* The lowest supported version of PHP is now 5.2.3.
* The full list of features is here:
http://www.mediawiki.org/wiki/Release_notes/1.17
- The update-script removes inclusion of DefaultSettings.php from code
- The update-script moves the cache-folder out of the web-root
- Some improvements within the scripts have been made
Thu May 5 14:00:00 2011 opendevelAATTweberhofer.at
- 1.16.5
* Bug 28534 - XSS in MediaWiki
* Bug 28639 - Trivial account takeover using forged cookies possible
when $wgBlockDisablesLogin = true
- Renamed and cleaned up additional scripts
Sat Apr 30 14:00:00 2011 opendevelAATTweberhofer.at
- Removed building of ZhConversion.php again, removed build-folder
- Added patch #87145, which automatically disables xcache on cli-invokes
Fri Apr 29 14:00:00 2011 opendevelAATTweberhofer.at
- Re-packaged sources in bz2 file
- Build ZhConversion.php
- Deny access to cache-folder
Thu Apr 14 14:00:00 2011 opendevelAATTweberhofer.at
- 1.16.4
* Bug 28507 - XSS: Incorrect patch for bug 28235
- RPM Packaging
* The proposed apache configuration contains the new RewriteRule to
workaround the vulnerability
Tue Apr 12 14:00:00 2011 opendevelAATTweberhofer.at
- 1.16.3
* Bug 28235 - XSS: IE6 looks for the file extension in the query string
* Bug 28450 - Backslash-escaped comments allow CSS injection vulnerability
* Bug 28449 - Unauthorised access to transwiki import
- RPM Packaging
* Mediawiki_MakeAlias.sh script to generate new mediawikis has been added
* Mediawiki_Update.sh script has been added to update all wikis
* spec file has been simplified
* configuration file has been improved
Wed Feb 2 13:00:00 2011 opendevelAATTweberhofer.at
- 1.16.2
- (bug 26642) Fixed incorrect translated namespace due to a regression in the
language converter.
- The interface translations were updated.
- (bug 27093, CVE-2011 --0047): Fixed CSS injection vulnerability.
- (bug 27094) Fixed server-side arbitrary script inclusion vulnerability.
Affects Windows servers only. A malicious file with extension \".php\" must
exist on the server for the exploit to be effective.
Mon Jan 24 13:00:00 2011 opendevelAATTweberhofer.at
- 1.16.1
- (bug 26561) Clickjacking vulnerabilities
- (bug 24981) Allow extensions to access SpecialUpload variables again
- (bug 24724) list=allusers was out by 1 (shows total users - 1)
- (bug 24166) Fixed API error when using rvprop=tags
- For wikis using French as a content language, Special:Téléchargement
works again as an alias for Special:Upload.
- (bug 25167) Correctly load JS fixes for IE6 (fixing a regression in
1.16.0)
- (bug 25248) Fixed paraminfo errors in certain API modules.
- The installer now has improved handling for situations where
safe_mode is active or exec() and similar functions are disabled.
- (bug 19593) Specifying --server in now works for all maintenance
scripts.
- Fixed $wgLicenseTerms register globals.
Mon Oct 18 14:00:00 2010 opendevelAATTweberhofer.at
- replace image duplicates with symlinks
- move .htaccess rules into central configuration
- add api.php as a direct alias
Sun Oct 17 14:00:00 2010 opendevelAATTweberhofer.at
- move docs to default docs directory
- some fixes in documentation
- Added fdupes
Sat Oct 16 14:00:00 2010 opendevelAATTweberhofer.at
- include math extension\'s directory in the mediawiki package
- Improve Apache configuration
- Improve Documentation for short URLs
- Make the cache directory visible
Wed Oct 13 14:00:00 2010 opendevelAATTweberhofer.at
- Moved texcv to a seperate package
- build a noarch package
Mon Oct 11 14:00:00 2010 opendevelAATTweberhofer.at
- Initial package derived from an old opensuse version
- New, FHS compliant structure
- Update to mediawiki 1.16
