Bug 80518 - Update port: www/mediawiki
Summary: Update port: www/mediawiki
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Roman Bogorodskiy
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-05-01 23:20 UTC by Gerrit Beine
Modified: 2005-05-02 08:06 UTC (History)
0 users

See Also:

Attachments
file.diff (1.42 KB, patch)
2005-05-01 23:20 UTC, Gerrit Beine 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gerrit Beine 2005-05-01 23:20:01 UTC 
Update to the current version 1.3.12:

MediaWiki 1.3.12 is a security maintenance release.

A cross-site scripting injection vulnerability was discovered, which affects only MSIE clients and is only open if MediaWiki has been manually configured to run output through HTML Tidy ($wgUseTidy).
Comment 1 Roman Bogorodskiy freebsd_committer freebsd_triage 2005-05-02 07:21:44 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->novel

I'll take it.
Comment 2 Roman Bogorodskiy freebsd_committer freebsd_triage 2005-05-02 08:06:32 UTC 
State Changed
From-To: open->closed

Committed, thanks!