Re: [Mediawiki-l] MediaWiki-l Digest, Vol 79, Issue 9

Send MediaWiki-l mailing list submissions to ? ? ? ?mediawiki-l(a)lists.wikimedia.org To subscribe or unsubscribe via the World Wide Web, visit ? ? ? ?https://lists.wikimedia.org/mailman/listinfo/mediawiki-l or, via email, send a message with subject or body 'help' to ? ? ? ?mediawiki-l-request(a)lists.wikimedia.org You can reach the person managing the list at ? ? ? ?mediawiki-l-owner(a)lists.wikimedia.org When replying, please edit your Subject line so it is more specific than "Re: Contents of MediaWiki-l digest..." Today's Topics: ? 1. Re: Yellow discussion pages (Platonides) ? 2. Re: MediaWiki-l Digest, Vol 79, Issue 7 (Eng shoeb ahmed) ? 3. Re: Contents of MediaWiki-l digest... (Eng shoeb ahmed) ? 4. MediaWiki security update: 1.15.3 and 1.16.0beta2 (Tim Starling) ---------------------------------------------------------------------- Message: 1 Date: Tue, 06 Apr 2010 23:54:09 +0200 From: Platonides <Platonides(a)gmail.com> Subject: Re: [Mediawiki-l] Yellow discussion pages To: mediawiki-l(a)lists.wikimedia.org Message-ID: <hpgahr$mho$1(a)dough.gmane.org> Content-Type: text/plain; charset=ISO-8859-1 Benoit BRAIDA a ?crit: Just copy http://fr.wikipedia.org/wiki/MediaWiki:Monobook.css to yours. You are probably interested on all of it. The section doing the yellow background is: /* Pages de discussion */ .ns-talk * #content, .ns-talk * #p-cactions li, .ns-talk * #p-cactions li a { background:#FFE } ------------------------------ Message: 2 Date: Wed, 7 Apr 2010 01:19:53 +0300 From: Eng shoeb ahmed <dwnsense(a)gmail.com> Subject: Re: [Mediawiki-l] MediaWiki-l Digest, Vol 79, Issue 7 To: mediawiki-l(a)lists.wikimedia.org Message-ID: ? ? ? ?<x2h173c6c841004061519icff7b65asbdefe07f4cc1f89c(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 On Tue, Apr 6, 2010 at 11:27 PM, <mediawiki-l-request(a)lists.wikimedia.org> wrote: > Send MediaWiki-l mailing list submissions to > ? ? ? ?mediawiki-l(a)lists.wikimedia.org > > To subscribe or unsubscribe via the World Wide Web, visit > ? ? ? ?https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > or, via email, send a message with subject or body 'help' to > ? ? ? ?mediawiki-l-request(a)lists.wikimedia.org > > You can reach the person managing the list at > ? ? ? ?mediawiki-l-owner(a)lists.wikimedia.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of MediaWiki-l digest..." > > > Today's Topics: > > ? 1. Re: Breadcrumbs? (Sean McAfee) > ? 2. Re: Flow into the pages (Platonides) > ? 3. (no subject) (Eng shoeb ahmed) > ? 4. Re: Contents of MediaWiki-l digest... (Eng shoeb ahmed) > ? 5. Re: Upgrade to 1.15.2 question (Tolliver) > ? 6. Fwd: Re: ?Contents of MediaWiki-l digest... (Chad) > ? 7. Yellow discussion pages (Benoit BRAIDA) > ? 8. Re: Upgrade to 1.15.2 question (Tolliver) > ? 9. Trouble hiding Navigation toolbar (Alex Durlak (Standard Form)) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 06 Apr 2010 10:29:09 -0400 > From: Sean McAfee <smcafee(a)collaborativefusion.com> > Subject: Re: [Mediawiki-l] Breadcrumbs? > To: MediaWiki announcements and site admin list > ? ? ? ?<mediawiki-l(a)lists.wikimedia.org> > Message-ID: <4BBB4535.8060708(a)collaborativefusion.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Deon Metelski wrote: >> Deon Metelski wrote: >>> Hi all, >>> >>> I just created subpages and enabled them for the Custom NameSpace that I >>> created. My question is does the breadcrumb bar show automatically with >>> subpages or do I have to install the extension breadcrumb? I am not sure >> if >>> this is a built-in feature already on mediwiki or it is the extension. >>> >>> Thank you, >>> Deon >> >>> As long as the namespace appears in $wgNamespacesWithSubpages, >the >>> breadcrumbs should magically show up. >> >>> Sean McAfee >>> Senior Systems Engineer >> >> I even went to the Monobook theme and it still does not show. I am creating >> the subpages through Semantic Forms so i am not sure if that is causing >> issues...my LocalSetting.php has the following which I think is correct >> >> $wgExtraNamespaces[200] = "Lesson"; >> $wgExtraNamespaces[201] = "Lesson_talk"; >> $wgExtraNamespaces[202] = "ProjectLearning"; >> $wgExtraNamespaces[203] = "ProjectLearning_talk"; >> >> $wgContentNamespaces[] = 200; >> $wgContentNamespaces[] = 202; >> >> define("NS_PROJECTLEARNING", 200); >> define("NS_LESSON_TALK", 201); >> define("NS_PROJECTLEARNING_TALK", 202); >> >> >> $wgNamespacesWithSubpages [NS_PROJECTLEARNING] = true; >> $wgNamespacesWithSubpages [NS_PROJECTLEARNING_TALK] = true; >> $wgNamespacesWithSubpages [NS_LESSON_TALK] = true; >> >> If anyone can confirm these settings would work o generate breadcrumbs I can >> look at the Semantic Form extension/templates >> Thanks, >> Deon >> _______________________________________________ >> MediaWiki-l mailing list >> MediaWiki-l(a)lists.wikimedia.org >> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > First off, you've got a typo: > > ?> define("NS_PROJECTLEARNING", 200); > ?> define("NS_LESSON_TALK", 201); > ?> define("NS_PROJECTLEARNING_TALK", 202); > > Should be: > > define("NS_PROJECTLEARNING", 200); > define("NS_LESSON_TALK", 201); > define("NS_PROJECTLEARNING", 202); > define("NS_PROJECTLEARNING_TALK", 203); > > I did something eerily similar before and it resulted in a bunch of > broken namespaces that were a disaster to clean up later. > > But to enable the breadcrumbs for those namespaces try adding the > following line to LocalSettings.php: > > $wgNamespacesWithSubpages = array_fill(200, 203, true); > > -- > Sean McAfee > Senior Systems Engineer > > > > ------------------------------ > > Message: 2 > Date: Tue, 06 Apr 2010 17:02:34 +0200 > From: Platonides <Platonides(a)gmail.com> > Subject: Re: [Mediawiki-l] Flow into the pages > To: mediawiki-l(a)lists.wikimedia.org > Message-ID: <hpfie1$l7m$1(a)dough.gmane.org> > Content-Type: text/plain; charset=ISO-8859-1 > > Juan Jes?s Cremades Monserrat escribi?: >> Hi, >> >> I'm searching a meaning to give a little flow to the articles of my wiki. >> For example, if a section value into a template is void: >> >> ... >> ==Title== >> {{{title}}} >> ... >> --------------------------------------- >> {{ >> ... >> | title = >> ... >> }} >> >> The "Title" won't be printing. I've found the >> "Extension:Winter/Documentation" but, is this the only? Thnaks > > That's usually achieved in wikipedia by using parserfunctions: > > {{#if: {{{title|}}} | > == Title == > {{{title}}} > }} > > > > > ------------------------------ > > Message: 3 > Date: Tue, 6 Apr 2010 18:09:28 +0300 > From: Eng shoeb ahmed <dwnsense(a)gmail.com> > Subject: [Mediawiki-l] (no subject) > To: mediawiki-l(a)lists.wikimedia.org > Message-ID: > ? ? ? ?<g2q173c6c841004060809mc8259c0bk34c927b4c2d03589(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > > > > > ------------------------------ > > Message: 4 > Date: Tue, 6 Apr 2010 18:11:49 +0300 > From: Eng shoeb ahmed <dwnsense(a)gmail.com> > Subject: Re: [Mediawiki-l] Contents of MediaWiki-l digest... > To: mediawiki-l(a)lists.wikimedia.org > Message-ID: > ? ? ? ?<p2n173c6c841004060811jc6e4ea3dlaff4cb5642b6eac6(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > > > > > ------------------------------ > > Message: 5 > Date: Tue, 06 Apr 2010 12:14:50 -0300 > From: Tolliver <tolliver(a)dal.ca> > Subject: Re: [Mediawiki-l] Upgrade to 1.15.2 question > To: MediaWiki announcements and site admin list > ? ? ? ?<mediawiki-l(a)lists.wikimedia.org> > Message-ID: <4BBB4FEA.4010908(a)dal.ca> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hello, > > Thanks very much, that worked! > > Unfortunately, when I try to access the wiki I get a permissions error; > that I will determine where the permissions need to be granted again, > since the upgrade. > > > ?Forbidden > > You don't have permission to access / on this server. > > When I try ?"apachectl graceful" , I get this error: > --------------------------------------------------------------------------------- > apachectl: Configuration syntax error, will not run "graceful": > httpd: Syntax error on line 209 of /etc/httpd/conf/httpd.conf: Syntax > error on line 180 of /etc/httpd/conf.d/wiki-ssl.conf: Could not open > configuration file /appl/web/devwiki/etc/devwiki.conf: No such file or > directory > > Lines in question: > line 209 in httpd.conf is: Include conf.d/*.conf > Line 180 of wiki-ssl.conf is: SSLOptions +StdEnvVars > /appl/web/devwiki/etc/devwiki.conf (doesn't exist) > > > > Thanks, > Graham > > > > > > > > > > > > > > > > > > > > > > > > Huib Laurens wrote: >> Graham, >> >> Maybe you should comment all the extensions out of Localsettings.php >> and re-add them when you are done. >> >> Huib >> >> 2010/4/5, Tolliver <tolliver(a)dal.ca>ca>: >> >>> Hello Ryan, >>> >>> I get the following with that line removed from LocalSettings.php: >>> >>> PHP Notice: ?Undefined index: ?PHP_AUTH_USER in >>> /appl/web/devwiki/public_www/mediawiki-1.15/extensions/Auth_remoteuser.php >>> on line 92 >>> PHP Warning: ?require_once(extensions/WhosOnline.php): failed to open >>> stream: No such file or directory in >>> /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php on line 143 >>> PHP Fatal error: ?require_once(): Failed opening required >>> 'extensions/WhosOnline.php' >>> (include_path='/appl/web/devwiki/public_www/mediawiki-1.15:/appl/web/devwiki/public_www/mediawiki-1.15/includes:/appl/web/devwiki/public_www/mediawiki-1.15/languages:.:/usr/share/pear:/usr/share/php') >>> in /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php on line 143 >>> >>> Thanks, >>> Graham >>> ------------------ >>> Lane, Ryan wrote: >>> >>>>> Here is what I get when I run, ?php update.php --aconf >>>>> ../AdminSettings.php: >>>>> >>>>> PHP Notice: ?Undefined index: ?PHP_AUTH_USER in >>>>> /appl/web/devwiki/public_www/mediawiki-1.15/extensions/Auth_re >>>>> moteuser.php >>>>> on line 92 >>>>> PHP Warning: >>>>> require_once(/appl/web/devwiki/public_www/mediawiki-1.15/exten >>>>> sions/FCKeditor/FCKeditor.php): >>>>> failed to open stream: No such file or directory in >>>>> /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php >>>>> on line 138 >>>>> PHP Fatal error: ?require_once(): Failed opening required >>>>> '/appl/web/devwiki/public_www/mediawiki-1.15/extensions/FCKedi >>>>> tor/FCKeditor.php' >>>>> (include_path='/appl/web/devwiki/public_www/mediawiki-1.15:/ap >>>>> pl/web/devwiki/public_www/mediawiki-1.15/includes:/appl/web/de >>>>> vwiki/public_www/mediawiki-1.15/languages:.:/usr/share/pear:/u >>>>> sr/share/php') >>>>> in >>>>> /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php >>>>> on line 138 >>>>> >>>>> >>>>> >>>>> - This is line 92 from AdminSettings.php: >>>>> ? if ( strlen($_SERVER['PHP_AUTH_USER']) ) { >>>>> >>>>> >>>>> >>>> This part of the update.php log is just a notice, and can be ignored. >>>> PHP_AUTH_USER isn't defined because no one is authenticating. You don't >>>> need >>>> authentication from the commandline though. >>>> >>>> >>>> >>>>> - There isn't a FCKeditor.php file in the root dir; can it simply be >>>>> copied from and existing wiki on the server? >>>>> >>>>> >>>>> >>>> Comment out the FCKeditor extension from LocalSettings.php, and then try >>>> again. Re-add it when you are done. >>>> >>>> V/r, >>>> >>>> Ryan Lane >>>> >>>> ------------------------------------------------------------------------ >>>> >>>> _______________________________________________ >>>> MediaWiki-l mailing list >>>> MediaWiki-l(a)lists.wikimedia.org >>>> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >>>> >>>> >>> _______________________________________________ >>> MediaWiki-l mailing list >>> MediaWiki-l(a)lists.wikimedia.org >>> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >>> >>> >> >> >> > > > > > ------------------------------ > > Message: 6 > Date: Tue, 6 Apr 2010 11:54:48 -0400 > From: Chad <innocentkiller(a)gmail.com> > Subject: [Mediawiki-l] Fwd: Re: ?Contents of MediaWiki-l digest... > To: MediaWiki announcements and site admin list > ? ? ? ?<mediawiki-l(a)lists.wikimedia.org> > Message-ID: > ? ? ? ?<w2t5924f50a1004060854t1dd32389g516e9c0359c2e2cb(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > I sent a private e-mail to -owner asking for this person > to be put on moderation. Asking again publicly: please > moderate this person. This is the 4th (5th?) junk email > from this address. > > -Chad > > ---------- Forwarded message ---------- > From: "Eng shoeb ahmed" <dwnsense(a)gmail.com> > Date: Apr 6, 2010 11:12 AM > Subject: Re: [Mediawiki-l] Contents of MediaWiki-l digest... > To: <mediawiki-l(a)lists.wikimedia.org> > > > > _______________________________________________ > MediaWiki-l mailing list > MediaWiki-l(a)lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > ------------------------------ > > Message: 7 > Date: Tue, 6 Apr 2010 18:24:45 +0200 > From: Benoit BRAIDA <bbraida(a)me.com> > Subject: [Mediawiki-l] Yellow discussion pages > To: mediawiki-l(a)lists.wikimedia.org > Message-ID: <468136DA-E226-430B-A11A-9086DF5AFA80(a)me.com> > Content-Type: text/plain; charset=iso-8859-1 > > > > > > > ------------------------------ > > Message: 8 > Date: Tue, 06 Apr 2010 15:42:26 -0300 > From: Tolliver <tolliver(a)dal.ca> > Subject: Re: [Mediawiki-l] Upgrade to 1.15.2 question > To: tolliver(a)dal.ca, MediaWiki announcements and site admin list > ? ? ? ?<mediawiki-l(a)lists.wikimedia.org> > Message-ID: <4BBB8092.7080407(a)dal.ca> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > > Hello, > > Thanks to everyone for all of you assistance. > > I have resolved the issue; it was just missing the devwiki.conf file, of > which I shouldn't have overlooked. > > > Thanks again! > > -------------- > Tolliver wrote: >> Hello, >> >> Thanks very much, that worked! >> >> Unfortunately, when I try to access the wiki I get a permissions error; >> that I will determine where the permissions need to be granted again, >> since the upgrade. >> >> >> ? Forbidden >> >> You don't have permission to access / on this server. >> >> When I try ?"apachectl graceful" , I get this error: >> --------------------------------------------------------------------------------- >> apachectl: Configuration syntax error, will not run "graceful": >> httpd: Syntax error on line 209 of /etc/httpd/conf/httpd.conf: Syntax >> error on line 180 of /etc/httpd/conf.d/wiki-ssl.conf: Could not open >> configuration file /appl/web/devwiki/etc/devwiki.conf: No such file or >> directory >> >> Lines in question: >> line 209 in httpd.conf is: Include conf.d/*.conf >> Line 180 of wiki-ssl.conf is: SSLOptions +StdEnvVars >> /appl/web/devwiki/etc/devwiki.conf (doesn't exist) >> >> >> >> Thanks, >> Graham >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> Huib Laurens wrote: >> >>> Graham, >>> >>> Maybe you should comment all the extensions out of Localsettings.php >>> and re-add them when you are done. >>> >>> Huib >>> >>> 2010/4/5, Tolliver <tolliver(a)dal.ca>ca>: >>> >>> >>>> Hello Ryan, >>>> >>>> I get the following with that line removed from LocalSettings.php: >>>> >>>> PHP Notice: ?Undefined index: ?PHP_AUTH_USER in >>>> /appl/web/devwiki/public_www/mediawiki-1.15/extensions/Auth_remoteuser.php >>>> on line 92 >>>> PHP Warning: ?require_once(extensions/WhosOnline.php): failed to open >>>> stream: No such file or directory in >>>> /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php on line 143 >>>> PHP Fatal error: ?require_once(): Failed opening required >>>> 'extensions/WhosOnline.php' >>>> (include_path='/appl/web/devwiki/public_www/mediawiki-1.15:/appl/web/devwiki/public_www/mediawiki-1.15/includes:/appl/web/devwiki/public_www/mediawiki-1.15/languages:.:/usr/share/pear:/usr/share/php') >>>> in /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php on line 143 >>>> >>>> Thanks, >>>> Graham >>>> ------------------ >>>> Lane, Ryan wrote: >>>> >>>> >>>>>> Here is what I get when I run, ?php update.php --aconf >>>>>> ../AdminSettings.php: >>>>>> >>>>>> PHP Notice: ?Undefined index: ?PHP_AUTH_USER in >>>>>> /appl/web/devwiki/public_www/mediawiki-1.15/extensions/Auth_re >>>>>> moteuser.php >>>>>> on line 92 >>>>>> PHP Warning: >>>>>> require_once(/appl/web/devwiki/public_www/mediawiki-1.15/exten >>>>>> sions/FCKeditor/FCKeditor.php): >>>>>> failed to open stream: No such file or directory in >>>>>> /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php >>>>>> on line 138 >>>>>> PHP Fatal error: ?require_once(): Failed opening required >>>>>> '/appl/web/devwiki/public_www/mediawiki-1.15/extensions/FCKedi >>>>>> tor/FCKeditor.php' >>>>>> (include_path='/appl/web/devwiki/public_www/mediawiki-1.15:/ap >>>>>> pl/web/devwiki/public_www/mediawiki-1.15/includes:/appl/web/de >>>>>> vwiki/public_www/mediawiki-1.15/languages:.:/usr/share/pear:/u >>>>>> sr/share/php') >>>>>> in >>>>>> /appl/web/devwiki/public_www/mediawiki-1.15/LocalSettings.php >>>>>> on line 138 >>>>>> >>>>>> >>>>>> >>>>>> - This is line 92 from AdminSettings.php: >>>>>> ? if ( strlen($_SERVER['PHP_AUTH_USER']) ) { >>>>>> >>>>>> >>>>>> >>>>>> >>>>> This part of the update.php log is just a notice, and can be ignored. >>>>> PHP_AUTH_USER isn't defined because no one is authenticating. You don't >>>>> need >>>>> authentication from the commandline though. >>>>> >>>>> >>>>> >>>>> >>>>>> - There isn't a FCKeditor.php file in the root dir; can it simply be >>>>>> copied from and existing wiki on the server? >>>>>> >>>>>> >>>>>> >>>>>> >>>>> Comment out the FCKeditor extension from LocalSettings.php, and then try >>>>> again. Re-add it when you are done. >>>>> >>>>> V/r, >>>>> >>>>> Ryan Lane >>>>> >>>>> ------------------------------------------------------------------------ >>>>> >>>>> _______________________________________________ >>>>> MediaWiki-l mailing list >>>>> MediaWiki-l(a)lists.wikimedia.org >>>>> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >>>>> >>>>> >>>>> >>>> _______________________________________________ >>>> MediaWiki-l mailing list >>>> MediaWiki-l(a)lists.wikimedia.org >>>> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >>>> >>>> >>>> >>> >>> >> >> >> _______________________________________________ >> MediaWiki-l mailing list >> MediaWiki-l(a)lists.wikimedia.org >> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l >> >> > > > > > ------------------------------ > > Message: 9 > Date: Tue, 6 Apr 2010 16:27:12 -0400 > From: "Alex Durlak (Standard Form)" <a.durlak(a)standardform.org> > Subject: [Mediawiki-l] Trouble hiding Navigation toolbar > To: mediawiki-l(a)lists.wikimedia.org > Message-ID: > ? ? ? ?<o2q1c269fba1004061327v834f2e01v577ed774b4790c08(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Hello Everyone! > > I'm working on customizing my mediawiki site: > > http://standardform.org/wiki > > I was able to successfully hide the logo and the search boxes that are > on the left hand side by using the following method in the 'main.css' > file of my skin: > > > #p-logo { > ? ? ? ?display:none!important; > } > > > but when I try the same thing with #p-navigation nothing happens. I've > also tried going into MediaWiki:Sidebar and delete all the contents > from there and it just reverts to the default list of links. > > Any suggestions on how I can hide/remove the navigation toolbox? > > Thanks! > Alex > > > > ------------------------------ > > _______________________________________________ > MediaWiki-l mailing list > MediaWiki-l(a)lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l > > > End of MediaWiki-l Digest, Vol 79, Issue 7 > ****************************************** > ------------------------------ Message: 3 Date: Wed, 7 Apr 2010 01:25:59 +0300 From: Eng shoeb ahmed <dwnsense(a)gmail.com> Subject: Re: [Mediawiki-l] Contents of MediaWiki-l digest... To: mediawiki-l(a)lists.wikimedia.org Message-ID: ? ? ? ?<i2s173c6c841004061525r55a6aecaqbe542565f2179031(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 On Tue, Apr 6, 2010 at 3:00 PM, <mediawiki-l-request(a)lists.wikimedia.org> wrote: ------------------------------ Message: 4 Date: Wed, 07 Apr 2010 11:03:09 +1000 From: Tim Starling <tstarling(a)wikimedia.org> Subject: [Mediawiki-l] MediaWiki security update: 1.15.3 and ? ? ? ?1.16.0beta2 To: mediawiki-l(a)lists.wikimedia.org, wikitech-l(a)lists.wikimedia.org, ? ? ? ?mediawiki-announce(a)lists.wikimedia.org Message-ID: <4BBBD9CD.9040306(a)wikimedia.org> Content-Type: text/plain; charset=UTF-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is a security and bugfix release of MediaWiki 1.15.3 and MediaWiki 1.16.0beta2. MediaWiki was found to be vulnerable to login CSRF. An attacker who controls a user account on the target wiki can force the victim to log in as the attacker, via a script on an external website. If the wiki is configured to allow user scripts, say with "$wgAllowUserJs = true" in LocalSettings.php, then the attacker can proceed to mount a phishing-style attack against the victim to obtain their password. Even without user scripting, this attack is a potential nuisance, and so all public wikis should be upgraded if possible. Our fix includes a breaking change to the API login action. Any clients using it will need to be updated. We apologise for making such a disruptive change in a minor release, but we feel that security is paramount. For more details see https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 ********************************************************************** ?1.15.3 ********************************************************************** Full release notes: http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_15_3/phase3/RELEASE-NO… Download: http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.3.tar.gz Patch to previous version (1.15.2), without interface text: http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.3.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.15/mediawiki-i18n-1.15.3.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.3.tar.gz.sig http://download.wikimedia.org/mediawiki/1.15/mediawiki-1.15.3.patch.gz.sig http://download.wikimedia.org/mediawiki/1.15/mediawiki-i18n-1.15.3.patch.gz… Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** ?1.16.0beta2 ********************************************************************** Full release notes: http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_16_0beta2/phase3/RELEA… Download: http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.0beta2.tar.gz Patch to previous version (1.16.0beta1), without interface text: http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.0beta2.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.16/mediawiki-i18n-1.16.0beta2.pat… GPG signatures: http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.0beta2.tar.gz.s… http://download.wikimedia.org/mediawiki/1.16/mediawiki-1.16.0beta2.patch.gz… http://download.wikimedia.org/mediawiki/1.16/mediawiki-i18n-1.16.0beta2.pat… Public keys: https://secure.wikimedia.org/keys.html ------------------------------ _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l End of MediaWiki-l Digest, Vol 79, Issue 8 ******************************************