From 872c18f9f7592936c8656aa80a8c97031e59f845 Mon Sep 17 00:00:00 2001 From: edwin Date: Tue, 20 Dec 2005 20:52:18 +0000 Subject: www/mediawiki update to 1.5.3 (security update) Fixes a security issue: Validation of the user language option was broken by a code change in May 2005, opening the possibility of remote code execution as this parameter is used in forming a class name dynamically created with eval(). The validation has been corrected in this version. All prior 1.5 release and prelease versions are affected; 1.4 and earlier and not affected. PR: ports/90335 Submitted by: Thomas Vogt Approved by: maintainer timeout --- www/mediawiki17/distinfo | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'www/mediawiki17/distinfo') diff --git a/www/mediawiki17/distinfo b/www/mediawiki17/distinfo index 8543e69..2c1c183 100644 --- a/www/mediawiki17/distinfo +++ b/www/mediawiki17/distinfo @@ -1,2 +1,3 @@ -MD5 (mediawiki-1.5.2.tar.gz) = 3aedde46937494bc21a5e493ea6a8ffd -SIZE (mediawiki-1.5.2.tar.gz) = 2290374 +MD5 (mediawiki-1.5.3.tar.gz) = fc697787f04208d1842a2c646deca626 +SHA256 (mediawiki-1.5.3.tar.gz) = 0f9620901d652452768ce309bae9ebdf5f1593efb749845f9a78d0a8b63e793a +SIZE (mediawiki-1.5.3.tar.gz) = 2287061 -- cgit v1.1