[pkgsrc/pkgsrc-2017Q1]: pkgsrc/www/mediawiki Pullup ticket #5257 - requested ...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/f75755f21bab
branches:  pkgsrc-2017Q1
changeset: 360224:f75755f21bab
user:      spz <spz%pkgsrc.org@localhost>
date:      Sun Apr 09 17:55:03 2017 +0000

description:
Pullup ticket #5257 - requested by wen
www/mediawiki: security update

Revisions pulled up:
- www/mediawiki/Makefile                                        1.64
- www/mediawiki/PLIST                                           1.31
- www/mediawiki/distinfo                                        1.49

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Sun Apr  9 01:26:46 UTC 2017

   Modified Files:
           pkgsrc/www/mediawiki: Makefile PLIST distinfo

   Log Message:
   Update to 1.18.1

   Upstream changes:
   MediaWiki 1.28.1
   Changes since 1.28.0

       $wgRunJobsAsync is now false by default (T142751). This change
   only affects wikis with $wgJobRunRate > 0.
       Fix fatal from "WaitConditionLoop" not being found, experienced
   when a wiki has more than one database server setup.
       (T152717) Better escaping for PHP mail() command
       (T154670) A missing method causing the MySQL installer to fatal in
   rare circumstances was restored.
       (T154672) Un-deprecate ArticleAfterFetchContentObject hook.
       (T158766) Avoid SQL error on MSSQL when using selectRowCount()
       (T145635) Fix too long index error when installing with MSSQL
       (T156184) $wgRawHtml will no longer apply to internationalization messages.
       (T160519) CACHE_ANYTHING will not be CACHE_ACCEL if no accelerator
   is installed.
       (T154872) Fix incorrect ar_usertext_timestamp index names in new
   1.28 installs.
       (T109140) (T122209) SECURITY: Special:UserLogin and Special:Search
   allow redirect to interwiki links.
       (T144845) SECURITY: XSS in SearchHighlighter::highlightText() when
   $wgAdvancedSearchHighlighting is true.
       (T125177) SECURITY: API parameters may now be marked as
   "sensitive" to keep their values out of the logs.
       (T150044) SECURITY: "Mark all pages visited" on the watchlist now
   requires a CSRF token.
       (T156184) SECURITY: Escape content model/format url parameter in message.
       (T151735) SECURITY: SVG filter evasion using default attribute
   values in DTD declaration.
       (T161453) SECURITY: LocalisationCache will no longer use the
   temporary directory in it's fallback chain when trying to work out
   where to write the cache.
       (T48143) SECURITY: Spam blacklist ineffective on encoded URLs
   inside file inclusion syntax's link parameter.


   To generate a diff of this commit:
   cvs rdiff -u -r1.63 -r1.64 pkgsrc/www/mediawiki/Makefile
   cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/mediawiki/PLIST
   cvs rdiff -u -r1.48 -r1.49 pkgsrc/www/mediawiki/distinfo

diffstat:

 www/mediawiki/Makefile |   4 ++--
 www/mediawiki/PLIST    |   8 +++++++-
 www/mediawiki/distinfo |  10 +++++-----
 3 files changed, 14 insertions(+), 8 deletions(-)

diffs (90 lines):

diff -r 2cde23b04463 -r f75755f21bab www/mediawiki/Makefile
--- a/www/mediawiki/Makefile    Sat Apr 08 19:28:31 2017 +0000
+++ b/www/mediawiki/Makefile    Sun Apr 09 17:55:03 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.62 2016/12/03 03:06:50 wen Exp $
+# $NetBSD: Makefile,v 1.62.4.1 2017/04/09 17:55:03 spz Exp $
 
 DISTNAME=      mediawiki-${VER}.${PVER}
 CATEGORIES=    www
@@ -23,7 +23,7 @@
 .include "options.mk"
 
 VER=                   1.28
-PVER=                  0
+PVER=                  1
 
 APACHE_USER?=          www
 APACHE_GROUP?=         www
diff -r 2cde23b04463 -r f75755f21bab www/mediawiki/PLIST
--- a/www/mediawiki/PLIST       Sat Apr 08 19:28:31 2017 +0000
+++ b/www/mediawiki/PLIST       Sun Apr 09 17:55:03 2017 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.30 2016/12/03 03:06:50 wen Exp $
+@comment $NetBSD: PLIST,v 1.30.4.1 2017/04/09 17:55:03 spz Exp $
 share/examples/mediawiki/mediawiki.conf
 share/mediawiki/.stylelintrc
 share/mediawiki/COPYING
@@ -5242,6 +5242,7 @@
 share/mediawiki/includes/specials/SpecialFewestrevisions.php
 share/mediawiki/includes/specials/SpecialFileDuplicateSearch.php
 share/mediawiki/includes/specials/SpecialFilepath.php
+share/mediawiki/includes/specials/SpecialGoToInterwiki.php
 share/mediawiki/includes/specials/SpecialImport.php
 share/mediawiki/includes/specials/SpecialJavaScriptTest.php
 share/mediawiki/includes/specials/SpecialLinkAccounts.php
@@ -5543,6 +5544,7 @@
 share/mediawiki/languages/i18n/en-ca.json
 share/mediawiki/languages/i18n/en-gb.json
 share/mediawiki/languages/i18n/en.json
+share/mediawiki/languages/i18n/en.json.rej
 share/mediawiki/languages/i18n/eo.json
 share/mediawiki/languages/i18n/es.json
 share/mediawiki/languages/i18n/et.json
@@ -5722,6 +5724,7 @@
 share/mediawiki/languages/i18n/pt-br.json
 share/mediawiki/languages/i18n/pt.json
 share/mediawiki/languages/i18n/qqq.json
+share/mediawiki/languages/i18n/qqq.json.rej
 share/mediawiki/languages/i18n/qu.json
 share/mediawiki/languages/i18n/qug.json
 share/mediawiki/languages/i18n/rgn.json
@@ -6313,6 +6316,7 @@
 share/mediawiki/maintenance/archives/patch-rd_interwiki.sql
 share/mediawiki/maintenance/archives/patch-recentchanges-utindex.sql
 share/mediawiki/maintenance/archives/patch-redirect.sql
+share/mediawiki/maintenance/archives/patch-rename-ar_usertext_timestamp.sql
 share/mediawiki/maintenance/archives/patch-rename-iwl_prefix.sql
 share/mediawiki/maintenance/archives/patch-rename-user_groups-and_rights.sql
 share/mediawiki/maintenance/archives/patch-rev_deleted.sql
@@ -6529,6 +6533,7 @@
 share/mediawiki/maintenance/minify.php
 share/mediawiki/maintenance/moveBatch.php
 share/mediawiki/maintenance/mssql/archives/patch-add-cl_collation_ext_index.sql
+share/mediawiki/maintenance/mssql/archives/patch-alter-table-oldimage.sql
 share/mediawiki/maintenance/mssql/archives/patch-archive-drop-fks.sql
 share/mediawiki/maintenance/mssql/archives/patch-bot_passwords.sql
 share/mediawiki/maintenance/mssql/archives/patch-categorylinks-constraints.sql
@@ -11378,6 +11383,7 @@
 share/mediawiki/tests/phpunit/includes/media/WebPTest.php
 share/mediawiki/tests/phpunit/includes/media/XCFTest.php
 share/mediawiki/tests/phpunit/includes/objectcache/MemcachedBagOStuffTest.php
+share/mediawiki/tests/phpunit/includes/objectcache/ObjectCacheTest.php
 share/mediawiki/tests/phpunit/includes/objectcache/RESTBagOStuffTest.php
 share/mediawiki/tests/phpunit/includes/objectcache/RedisBagOStuffTest.php
 share/mediawiki/tests/phpunit/includes/page/ArticleTablesTest.php
diff -r 2cde23b04463 -r f75755f21bab www/mediawiki/distinfo
--- a/www/mediawiki/distinfo    Sat Apr 08 19:28:31 2017 +0000
+++ b/www/mediawiki/distinfo    Sun Apr 09 17:55:03 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.48 2016/12/03 03:06:50 wen Exp $
+$NetBSD: distinfo,v 1.48.4.1 2017/04/09 17:55:03 spz Exp $
 
-SHA1 (mediawiki-1.28.0.tar.gz) = 72da503c40e1b9c6ad1a636902f0a2bb10830bc6
-RMD160 (mediawiki-1.28.0.tar.gz) = 9870fc5aa6e68c1659f4d191429f1d066bfd7d16
-SHA512 (mediawiki-1.28.0.tar.gz) = ff118b0a2229265be4b5d461d25d8df48faf5d1b1911aa76fa1ed2dffab0f41030df6b1ae61aad050916606fba81f90f5437b65631786c95ebfd273b331cbc27
-Size (mediawiki-1.28.0.tar.gz) = 32952240 bytes
+SHA1 (mediawiki-1.28.1.tar.gz) = ad9c013bff14fede90ebddf2b49bf7c1670710bf
+RMD160 (mediawiki-1.28.1.tar.gz) = e980993d8ec89a2aed2fedfd61d81bf3ed718bce
+SHA512 (mediawiki-1.28.1.tar.gz) = 5b422ed628643a9a575a53133e3626374ea81b0efaddb578c8ae9f90ac3bb4da4903bf983daca1db6c8dfa5da53c20163836edbb80b7476f20d18abe3946fb3d
+Size (mediawiki-1.28.1.tar.gz) = 32965341 bytes