== MediaWiki 1.17.2 == 2012-01-11 This a maintenance and security release of the MediaWiki 1.17 branch. === Security changes === * (bug 33117) prop=revisions allows deleted text to be exposed through cache pollution. === Changes since 1.17.1 === * (bug 32709) Private Wiki users were always taken to Special:Badtitle on login. == MediaWiki 1.17.1 == 2011-11-24 This a maintenance and security release of the MediaWiki 1.17 branch. === Security changes === * (bug 32276) Skins were generating output using the internal page title which would allow anonymous users to determine wheter a page exists, potentially leaking private data. In fact, the curid and oldid request parameters would allow page titles to be enumerated even when they are not guessable. * (bug 32616) action=ajax requests were dispatched to the relevant internal functions without any read permission checks being done. This could lead to data leakage on private wikis.
5 lines
257 B
Text
5 lines
257 B
Text
$NetBSD: distinfo,v 1.11 2012/01/13 11:27:17 obache Exp $
|
|
|
|
SHA1 (mediawiki-1.17.2.tar.gz) = ffaa528ce62527813af21f30022c0c7d8511b641
|
|
RMD160 (mediawiki-1.17.2.tar.gz) = ab3eaad170c9083a046fff1abe00499fef320dc5
|
|
Size (mediawiki-1.17.2.tar.gz) = 14923943 bytes
|