Change logs for mediawiki source package in Quantal

  • mediawiki (1:1.19.2-2) unstable; urgency=low
    
    
      * debian/watch: mangle the epoch away so DDPO is green again
      * Break mw-ext-fckeditor, it doesn’t work with 1.19 (Closes: #689375)
    
     -- Thorsten Glaser <email address hidden>  Tue, 02 Oct 2012 14:09:42 +0200
  • mediawiki (1:1.19.2-1) unstable; urgency=low
    
    
      [ Thorsten Glaser ]
      * New upstream: security fixes for CVE-2012-4377, CVE-2012-4378,
        CVE-2012-4379, CVE-2012-4380, CVE-2012-4381, CVE-2012-4382
        (Closes: #686330)
      * Prevent <table></table> without any <tr /> inside, globally
      * Fix more cases of not checking $wgHtml5
      * MW’s ID (XML) sanitiser is there for a reason, use it!
      * Prevent <ul></ul> without any <li /> inside in MonoBook
      * Fix invalid XHTML caused by code not honouring $wgHtml5
      * Quell some PHP warnings from sloppy code
      * Do the wfSuppressWarnings patch used with FusionForge right
      * Add myself to Uploaders and quieten lintian a bit
      * Do not replace patched jquery-tablesorter with unpatched one;
        unbreaks sortable tables (Closes: #687519)
      * Update versioned Breaks against fusionforge and mw-extensions
    
      [ Jonathan Wiltshire ]
      * Add Recommends on mediawiki-extensions-base and php-wikidiff2
    
     -- Thorsten Glaser <email address hidden>  Thu, 20 Sep 2012 13:40:12 +0200
  • mediawiki (1:1.19.1-1) unstable; urgency=low
    
    
      * New upstream bug fix release
        Closes: #672818, 677895 (CVE-2012-2698)
        - debian/rules: remove all .gitignore files too, since upstream
          switched to git VCS
      * Remove last traces of mediaiki-math binary package
      * Remove CDBS logic and dependencies and use dh
        auto-sequencer instead
      * Depend on debhelper >=9 and use compat level 9; this
        stops dh_pysupport adding files to the build
      * Do not run update debconf translations on clean 
      * Disable patch texvc_location.patch; this really belongs in mediawiki-math
        now and especially considering <email address hidden>
      * Add a versioned Breaks on fusionforge-plugin-mediawiki
      * Upload to unstable
    
     -- Jonathan Wiltshire <email address hidden>  Mon, 18 Jun 2012 15:25:25 +0100
  • mediawiki (1:1.15.5-10) unstable; urgency=low
    
    
      * Team upload.
      * Apply SQL fix for schema search paths by Roland Mas (#673125)
    
     -- Thorsten Glaser <email address hidden>  Wed, 30 May 2012 16:50:36 +0200
  • mediawiki (1:1.15.5-9) unstable; urgency=high
    
    
      * Team upload.
      * Address MW security release 1.18.1-1 (Closes: #666269)
        - CVE-2012-1578 MW#34212: doesn’t affect 1.15
        - CVE-2012-1579 MW#34907: doesn’t affect 1.15
        - CVE-2012-1580 MW#35317: doesn’t affect 1.15
        - CVE-2012-1581 MW#35078: fix backported
        - CVE-2012-1582 MW#35315: fix backported
      * Apply some lintian cleanup
    
     -- Thorsten Glaser <email address hidden>  Wed, 16 May 2012 15:01:06 +0200
  • mediawiki (1:1.15.5-8) unstable; urgency=low
    
    
      * Fix reversing IPv4 address for SORBS blacklist; patch from
        Nye Liu <email address hidden> (Closes: #658672)
      * Backport a method called by CVE-2011-1580.patch (Closes: #658682)
      * Fix warnings issued by PHP 5.4 (Closes: #661682)
      * Suggest librsvg-bin (Closes: #644731)
      * Demote database server to Suggests (Closes: #617561)
      * Add dansk translation (Closes: #627848)
    
     -- Thorsten Glaser <email address hidden>  Thu, 15 Mar 2012 12:52:09 +0100
  • mediawiki (1:1.15.5-7) unstable; urgency=high
    
    
      * debian/patches/CVE-2011-4360.patch: remove – the information
        disclosure does not happen on 1.15 and the patch would not
        work anyway because the OutputPage object has no setTitle
        method (this prevents a PHP fatal error when someone has no
        permissions, instead reverting to the pre-1:1.15.5-4 behaviour
        of showing a page asking the user to log in)
    
     -- Thorsten Glaser <email address hidden>  Fri, 20 Jan 2012 17:13:28 +0100