Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

chore: request #37559 MediaWiki: 1.39.6 -> 1.39.7

Download Browse

Includes two security fixes: * (T355538, CVE-2024-PENDING) XSS in edit summary parser. * (T357760, CVE-2024-PENDING) Denial of service vector via GET request to Special:MovePage on pages with thousands of subpages. Changes: https://www.mediawiki.org/wiki/Release_notes/1.39#MediaWiki_1.39.7 To test, rebuild and redeploy the package. Change-Id: I6d86e2a0791549108f2097075b7d593255a0d18e

+12 −12
Thomas Gerbet (tgerbet) 2024-04-08 14:40
Thomas Gerbet (tgerbet) 2024-04-08 14:40
ab20bd2e9f3ce687757d7cfcd4e22d3819dc8758
2131de71262600c539087960fe2f43f8cb5cc2b3
git #tuleap/stable/ab20bd2e9f3ce687757d7cfcd4e22d3819dc8758

Modified Files

Side by side diff
Inline diff
Name
M plugins/mediawiki_standalone/additional-packages/mediawiki-extensions-current-lts/composer.json +5 −5 Go to diff View file
M plugins/mediawiki_standalone/additional-packages/mediawiki-extensions-current-lts/composer.lock +5 −5 Go to diff View file
M plugins/mediawiki_standalone/additional-packages/tuleap-mediawiki.nix +2 −2 Go to diff View file