MediaWiki-l January 2023

mediawiki-l@lists.wikimedia.org

14 participants
10 discussions

Lis tes messages avant qu'ils ne soient effacés!
by Badoo 31 Dec '23

31 Dec '23

Lis ton message de Nganguem Victor avant qu'il ne soit effacé! Pour lire ton message, suis simplement ce lien: http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 D'autres personnes sont aussi présentes: Oded (Tel Aviv, Israël) Priya (Udaipur, Inde) RajaYogi BK (Udaipur, Inde) Karuna (Udaipur, Inde) Chika Reginald Onyia (Pnompen', Cambodge) ...Qui d'autre? http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 Les liens ne fonctionnent pas dans ce message? Copie les dans la barre d'adresse de ton navigateur. Tu as reçu cet email suite à un message envoyé par Nganguem Victor de notre système. S'il s'agit d'une erreur, ignore simplement cet email. La requête sera alors effacée du système. Amuse-toi bien ! L'équipe Badoo Courrier automatique de Badoo suite à l'envoi d'un message à ton attention sur Badoo. Les réponses ne sont ni stockées, ni traitées. Si tu ne veux plus recevoir de message de Badoo, fais-le nous savoir: http://eu1.badoo.com/impersonation.phtml?lang_id=6&mail_code=65&email=media…

3 2

MediaWiki Extensions and Skins Security Release Supplement (1.35.9/1.38.4/1.39.1)
by Manfredi Martorana 05 Apr '23

05 Apr '23

Greetings- With the security/maintenance release of MediaWiki 1.35.9/1.38.4/1.39.1, we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: CheckUser + (T311337 <https://phabricator.wikimedia.org/T311337>, CVE-2022-39193) - Edits with the performer suppressed still show the performer in results from the CheckUser extension https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/879167/ CheckUser + (T316414 <https://phabricator.wikimedia.org/T316414>, CVE-2022-39193) - Special:Investigate can expose supressed information in check results https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/879166/ CheckUser + (T318166 <https://phabricator.wikimedia.org/T318166>, CVE-2022-39193) - CheckUser API can expose the suppressed performer https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/879073/ GrowthExperiments + (T321733 <https://phabricator.wikimedia.org/T321733>, CVE-2023-22945) - Action=growthmanagementorlist makes it possible for blocked users to enroll as mentors https://gerrit.wikimedia.org/r/c/mediawiki/extensions/GrowthExperiments/+/8… CheckUser + (T315123 <https://phabricator.wikimedia.org/T315123>, CVE-2023-22912) - CheckUser TokenManager insecurely uses AES-CTR encryption with repeated nonce, allowing an adversary to decrypt https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/879074/ MobileFrontend + (T320987 <https://phabricator.wikimedia.org/T320987>, CVE-2023-22909) - Mobile frontend's history makes really slow db queries https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MobileFrontend/+/8577… Widgets + (T149488 <https://phabricator.wikimedia.org/T149488>, CVE-2023-22911) - Widgets does widget replacement in html attributes potentially leading to XSS https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Widgets/+/856035/ Wikibase + (T323592 <https://phabricator.wikimedia.org/T323592>, CVE-2023-22910) - XSS in Wikibase date formatting https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/879171/ The Wikimedia Security Team recommends updating these extensions and/or skins to the current master branch or relevant, supported release branch [2] as soon as possible. Some of the referenced Phabricator tasks above _may_ still be private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns regarding this update, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator [3]. [1] https://phabricator.wikimedia.org/T318974 [2] https://www.mediawiki.org/wiki/Version_lifecycle [3] https://www.mediawiki.org/wiki/Reporting_security_bugs

1 1

[event] [crossposting] Wiki-based Business Process Tooling at NASA: The Need for Open CSP
by Erica Litrenta 09 Feb '23

09 Feb '23

The Tech Department at Wikimedia Foundation [1] invites you to a* special event on February 09, 2023, at 1600 UTC* [2]. *Richard Evans, Electronics & Data Systems Engineer At NASA Glenn Research Center *[3], will be presenting on *how MediaWiki is being used within NASA* to help manage the testing of very large spacecraft to prove they can survive the harsh conditions of launch, orbit, and re-entry. The management platform is built from MediaWiki and several key extensions that provide workflow support. This evolving platform plans to incorporate the extensions that form the MediaWiki-powered Open CSP platform [4]. This talk will explain the architecture and benefits of the NASA platform and motivate the need for Open CSP. We’ll also be recording the event to share with those who can’t make it. You can join the event through Google Meet [5]. Looking forward to seeing you there, *--on behalf of the Tech Department, Wikimedia Foundation.* *(For follow-ups, please reach out to *lnguyen(a)wikimedia.org.) [1] https://www.mediawiki.org/wiki/Wikimedia_Technology [2] https://zonestamp.toolforge.org/1675958415 [3] https://www.wikidata.org/wiki/Q618728#sitelinks-wikipedia [4] https://www.open-csp.org/Main_Page [5] https://stream.meet.google.com/stream/ce81307c-cdb7-4a5e-9697-65c423f27614 -- ________________________________ Erica Litrenta (she/her) Senior Manager, Community Relations Specialists (Product) Wikimedia Foundation

1 2

MediaWiki Language Extension Bundle 2023.01
by Kartik Mistry 25 Jan '23

25 Jan '23

We would like to announce the release of MediaWiki Language Extension Bundle 2023.01. This bundle is compatible with '''MediaWiki >= 1.38.0''' and requires '''PHP >= 7.4.0'''. The next MLEB is expected to be released in 3 months. If there are very important bug fixes, we will do an intermediate release. Please give us your feedback at [[Talk:MLEB|https://www.mediawiki.org/wiki/Talk:MLEB]]. * Download: https://translatewiki.net/mleb/MediaWikiLanguageExtensionBundle-2023.01.tar… * sha256sum: 47dac8f27c363fb03ac2dfab023e45fa6cae9a5a03c4271961052bdf0b5aa497 * Signature: https://translatewiki.net/mleb/MediaWikiLanguageExtensionBundle-2023.01.tar… Quick links: * Installation instructions are at: https://www.mediawiki.org/wiki/MLEB * Announcements of new releases will be posted to a mailing list: https://lists.wikimedia.org/postorius/lists/mediawiki-i18n.lists.wikimedia.… * Report bugs to: https://phabricator.wikimedia.org/project/view/1464/ A detailed release note for this release can be found at: https://www.mediawiki.org/wiki/MediaWiki_Language_Extension_Bundle/2023.01 -- Kartik Mistry | કાર્તિક મિસ્ત્રી kartikm.wordpress.com

1 0

Can MediaWiki scale images bigger than the source image?
by Patrick Schleizer 21 Jan '23

21 Jan '23

The usual error. > Error generating thumbnail > Error creating thumbnail: Image was not scaled, is the requested width bigger than the source? It's true. But is there some setting or extension to permit doing that? Cheers, Patrick

2 1

Extra Namespaces | Conflict Management
by Valerio 19 Jan '23

19 Jan '23

Hi, I made a big mistake. I defined a custom namespace in conflict with SocialProfile <https://www.mediawiki.org/wiki/Extension:SocialProfile> extension: # # # # # # # # # # # # # EXTRA NAMESPACES # # # # # # # # # # # # ###### BIOGRAPHY ###### define("NS_BIOGRAPHY", 202); define("NS_BIOGRAPHY_TALK", 203); $wgExtraNamespaces[NS_BIOGRAPHY] = "Biography"; $wgExtraNamespaces[NS_BIOGRAPHY_TALK] = "Biography_talk"; 202 User_profile: NS_USER_PROFILE 203 User_profile_talk: NS_USER_PROFILE_TALK Since r93317 <https://www.mediawiki.org/wiki/Special:Code/MediaWiki/93317>. What can I do to correct this conflict other than uninstall the Social Profile Thanks so much. Valerio The Traditional Tune Archive The Semantic Index of North American, British and Irish traditional instrumental music with annotation. ------- Web: http://tunearch.org <http://tunearch.org/> Mail: vmp(a)tunearch.org <mailto:vmp@tunearch.org> _______________ My Special:Version Installed software Product Version MediaWiki <https://www.mediawiki.org/> 1.35.7 <https://www.mediawiki.org/wiki/MediaWiki_1.35> (2912741) <https://gerrit.wikimedia.org/g/mediawiki/core.git/+/2912741f0bd6dcec405d9d3…> 00:00, July 13, 2022 PHP <https://php.net/> 7.3.29-1+ubuntu18.04.1+deb.sury.org+1 (apache2handler) MariaDB <https://mariadb.org/> 10.1.48-MariaDB-0ubuntu0.18.04.1 ICU <http://site.icu-project.org/> 65.1 Lua <http://www.lua.org/> 5.1.5 LilyPond <http://lilypond.org/> 2.18.2 Elasticsearch <https://www.elastic.co/products/elasticsearch> 6.8.18 SocialProfile <https://www.mediawiki.org/wiki/Extension:SocialProfile> 1.14 (0d678ab) <https://gerrit.wikimedia.org/g/mediawiki/extensions/SocialProfile/+/0d678ab…>03:03, November 22, 2020

2 1

Proofread Page extension problem with DjVu files after upgrade to 1.39
by sarunas.burdulis＠alumni.vu.lt 11 Jan '23

11 Jan '23

Hello, Our Mediawiki has just been upgraded from 1.35.8 to 1.39. update.php was run. All seems fine except an issue with Proofread Page extension and .djvu files. <pagelist> is no longer populated with the list of pages, "invalid interval" is reported. Individual pages from .djvu are also not rendered with Page:file.djvu/pagenumber. Proofread Page still works with PDF files. Here is an example of non-working index page: https://lituapedija.net/wiki/Indeksas:LE01.djvu It work for PDF and this is how it looked for .djvu too before upgrade: https://lituapedija.net/wiki/Indeksas:LE01.pdf I don't see anything relevant in mediawiki debug log. Mediawiki is running on Debian Bullseye (current stable), https://lituapedija.net/wiki/Specialus:Versija. Any hints or help would be greatly appreciated! Šarūnas Burdulis for lituapedija.net

2 1

Issue with encoding
by Zoran Dori 11 Jan '23

11 Jan '23

Hello, I'm working on one wiki which shows characters in a weird way. UTF-8 is used for encoding, so I believe that it isn't an issue. You can take a look here Statik A – Sub Bavaria (sub-bavaria.de) <http://www.sub-bavaria.de/w/index.php?title=Statik_A>, so you can better understand what I'm talking about. Could you please point me to something that I should look for, so I can fix this issue? Wiki was previously on version 1.31, I've upgraded it to 1.38. Thanks for your help and understanding! Best regards, Zoran

4 9

How to upgrade old MW Postgres DB backup into much newer MW version?
by MI 11 Jan '23

11 Jan '23

We had Mediawiki with PostgreSQL on a Debian 8 server. That machine is no longer accessible, but there is a backup of the database. The old versions were: - Postgres v. 9.4 - Mediawiki v. 1.25 or 1.27 ? Now we installed Mediawiki and PostgreSQL on a new Debian 11 server. But the database schema seems to be quite different so it will not be possible to import the backup directly. Our current versions on Debian 11 are from the "stable" ("bullseye") apt repository: - Mediawiki v. 1.35.8 - Postgresql v. 13.9 Is there a collection of database upgrade scripts somewhere, which I could use to upgrade, step by step, our backup DB to the current schema? (The import of the SQL backup into Postgres v. 13 works fine. But then the schema needs to be adapted to what MW expects) Thank you for any help, MI

3 2

Vulcans,cöx
by Estrella Montoya Castillo 03 Jan '23

03 Jan '23

Clfmcmfvghbv Von meinem iPad gesendet

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l January 2023