Transition Technology: Ticket #536: Upgrade Mediawiki to 1.19.6

chris — Tue, 30 Apr 2013 20:28:10 GMT

The new version is out:

I would like to announce the release of MediaWiki 1.20.5 and 1.19.6.
These releases fix 2 security related issues that could affect users
of MediaWiki. Download links are given at the end of this email.
* Jan Schejbal / Hatforce.com reported that SVG script filtering could
be bypassed for Chrome and Firefox clients by using an encoding that
MediaWiki understood, but these browsers interpreted as UTF-8.
https://bugzilla.wikimedia.org/show_bug.cgi?id=47304
* Internal review discovered that extensions were not given the
opportunity to disable a password reset, which could lead to
circumvention of two-factor authentication.
https://bugzilla.wikimedia.org/show_bug.cgi?id=46590
Full release notes for 1.19.6:
https://www.mediawiki.org/wiki/Release_notes/1.19
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-April/000129.html

hours, status, totalhours changed; resolution set

chris — Fri, 03 May 2013 13:44:06 GMT

hours changed from 0.0 to 0.25
status changed from new to closed
resolution set to fixed
totalhours changed from 0.0 to 0.25

sudo -i
cd /web/wiki.transitionnetwork.org
wget http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.6.tar.gz
wget http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.6.tar.gz.sig
gpg --verify mediawiki-1.19.6.tar.gz.sig
 gpg: Signature made Wed May  1 20:07:46 2013 BST using DSA key ID 62D84F01
 gpg: Good signature from "Chris Steipp <csteipp@wikimedia.org>"
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the owner.
 Primary key fingerprint: 1624 32D9 E81C 1C61 8B30  1EEC EE1F 6634 62D8 4F01
tar -zxvf mediawiki-1.19.6.tar.gz
rsync -av mediawiki-1.19.6/ www/
chown root:root -R www/
chown -R www-data:www-data www/cache
chown -R www-data:www-data www/images
cd www/maintenance/
php update.php

The version was then checked at https://wiki.transitionnetwork.org/Special:Version

And the documentation was updated wiki:PenguinServer#wiki.transitionnetwork.org

milestone set

chris — Tue, 14 May 2013 10:51:20 GMT

milestone set to Maintenance