<?xml version="1.0"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>Transition Technology: Ticket #793: MediaWiki Security and Maintenance Release 1.23.5</title>
    <link>http://localhost:8080/trac/ticket/793</link>
    <description>&lt;p&gt;
Announcement &lt;a class="ext-link" href="https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-October/000163.html"&gt;&lt;span class="icon"&gt;​&lt;/span&gt;email&lt;/a&gt;:
&lt;/p&gt;
&lt;blockquote class="citation"&gt;
&lt;p&gt;
I would like to announce the release of &lt;a class="wiki" href="http://localhost:8080/trac/wiki/MediaWiki"&gt;MediaWiki&lt;/a&gt; 1.19.20, 1.22.12 and 1.23.5. This is a security release. Download links are given at the end of this email.
&lt;/p&gt;
&lt;h2 id="Security"&gt;Security&lt;/h2&gt;
&lt;ul&gt;&lt;li&gt;(bug 70672) SECURITY: OutputPage: Remove separation of css and js module allowance.
&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;
Full release notes for 1.23.5: &amp;lt;&lt;a class="ext-link" href="https://www.mediawiki.org/wiki/Release_notes/1.23"&gt;&lt;span class="icon"&gt;​&lt;/span&gt;https://www.mediawiki.org/wiki/Release_notes/1.23&lt;/a&gt;&amp;gt;
&lt;/p&gt;
&lt;/blockquote&gt;
</description>
    <language>en-us</language>
    <image>
      <title>Transition Technology</title>
      <url>/trac/chrome/site/TransitionNetwork-Logo-Web-Small.jpg</url>
      <link>http://localhost:8080/trac/ticket/793</link>
    </image>
    <generator>Trac 0.12.5</generator>
    <item>
      
        <dc:creator>chris</dc:creator>

      <pubDate>Thu, 02 Oct 2014 09:25:46 GMT</pubDate>
      <title>hours, totalhours changed</title>
      <link>http://localhost:8080/trac/ticket/793#comment:1</link>
      <guid isPermaLink="false">http://localhost:8080/trac/ticket/793#comment:1</guid>
      <description>
          &lt;ul&gt;
            &lt;li&gt;&lt;strong&gt;hours&lt;/strong&gt;
                changed from &lt;em&gt;0.0&lt;/em&gt; to &lt;em&gt;0.35&lt;/em&gt;
            &lt;/li&gt;
            &lt;li&gt;&lt;strong&gt;totalhours&lt;/strong&gt;
                changed from &lt;em&gt;0.0&lt;/em&gt; to &lt;em&gt;0.35&lt;/em&gt;
            &lt;/li&gt;
          &lt;/ul&gt;
        &lt;p&gt;
Following the &lt;a class="wiki" href="http://localhost:8080/trac/wiki/MediaWiki#Updates"&gt;MediaWiki#Updates&lt;/a&gt; notes:
&lt;/p&gt;
&lt;pre class="wiki"&gt;sudo -i
cd /web/wiki.transitionnetwork.org
export MW="1.23.5"
wget http://releases.wikimedia.org/mediawiki/1.23/mediawiki-$MW.tar.gz -O mediawiki-$MW.tar.gz
wget http://releases.wikimedia.org/mediawiki/1.23/mediawiki-$MW.tar.gz.sig -O mediawiki-$MW.tar.gz.sig
gpg --verify mediawiki-$MW.tar.gz.sig
tar -zxvf mediawiki-$MW.tar.gz
rsync -av mediawiki-$MW/ www/
chown root:root -R www/
chown -R www-data:www-data www/cache/
chown -R www-data:www-data www/images/
cd www/maintenance/
php update.php
cd /web/wiki.transitionnetwork.org
rm mediawiki-$MW.tar.gz mediawiki-$MW.tar.gz.sig
rm -rf mediawiki-$MW
&lt;/pre&gt;&lt;p&gt;
I tested the site and it all seems to be fine.
&lt;/p&gt;
&lt;p&gt;
I also checked the sources.list for Parsoid as I didn't recall any updates for that and the line we had didn't match the &lt;a class="ext-link" href="https://www.mediawiki.org/wiki/Parsoid/Setup#Ubuntu_.2F_Debian_on_amd64"&gt;&lt;span class="icon"&gt;​&lt;/span&gt;install instructions&lt;/a&gt; so I updated &lt;tt&gt;/etc/apt/sources.list.d/parsoid.list&lt;/tt&gt; to:
&lt;/p&gt;
&lt;pre class="wiki"&gt;deb [arch=amd64] http://parsoid.wmflabs.org:8080/deb wmf-production main
&lt;/pre&gt;&lt;p&gt;
Imported the new GPG key:
&lt;/p&gt;
&lt;pre class="wiki"&gt;gpg --keyserver subkeys.pgp.net --recv-keys 00A5E8C26BF6E273
  gpg: requesting key 6BF6E273 from hkp server subkeys.pgp.net
  gpg: key 6BF6E273: public key "Parsoid &amp;lt;parsoid@wikimedia.org&amp;gt;" imported
  gpg: Total number processed: 1
  gpg:               imported: 1  (RSA: 1)
gpg -a --export 6BF6E273 | apt-key add -
OK
&lt;/pre&gt;&lt;p&gt;
There wasn't an updated after doing the above.
&lt;/p&gt;
      </description>
      <category>Ticket</category>
    </item><item>
      
        <dc:creator>chris</dc:creator>

      <pubDate>Tue, 14 Oct 2014 09:53:23 GMT</pubDate>
      <title>status changed; resolution set</title>
      <link>http://localhost:8080/trac/ticket/793#comment:2</link>
      <guid isPermaLink="false">http://localhost:8080/trac/ticket/793#comment:2</guid>
      <description>
          &lt;ul&gt;
            &lt;li&gt;&lt;strong&gt;status&lt;/strong&gt;
                changed from &lt;em&gt;new&lt;/em&gt; to &lt;em&gt;closed&lt;/em&gt;
            &lt;/li&gt;
            &lt;li&gt;&lt;strong&gt;resolution&lt;/strong&gt;
                set to &lt;em&gt;fixed&lt;/em&gt;
            &lt;/li&gt;
          &lt;/ul&gt;
        &lt;p&gt;
Closing ticket as this is resolved.
&lt;/p&gt;
      </description>
      <category>Ticket</category>
    </item>
 </channel>
</rss>