MediaWiki-l March 2020

mediawiki-l@lists.wikimedia.org

26 participants
20 discussions

Lis tes messages avant qu'ils ne soient effacés!
by Badoo 31 Dec '23

31 Dec '23

Lis ton message de Nganguem Victor avant qu'il ne soit effacé! Pour lire ton message, suis simplement ce lien: http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 D'autres personnes sont aussi présentes: Oded (Tel Aviv, Israël) Priya (Udaipur, Inde) RajaYogi BK (Udaipur, Inde) Karuna (Udaipur, Inde) Chika Reginald Onyia (Pnompen', Cambodge) ...Qui d'autre? http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 Les liens ne fonctionnent pas dans ce message? Copie les dans la barre d'adresse de ton navigateur. Tu as reçu cet email suite à un message envoyé par Nganguem Victor de notre système. S'il s'agit d'une erreur, ignore simplement cet email. La requête sera alors effacée du système. Amuse-toi bien ! L'équipe Badoo Courrier automatique de Badoo suite à l'envoi d'un message à ton attention sur Badoo. Les réponses ne sont ni stockées, ni traitées. Si tu ne veux plus recevoir de message de Badoo, fais-le nous savoir: http://eu1.badoo.com/impersonation.phtml?lang_id=6&mail_code=65&email=media…

3 2

Issue in Gerrit setup
by sahaj khandelwal 31 Mar '20

31 Mar '20

I started working on the task https://phabricator.wikimedia.org/T244730, to push the changes, I followed the steps given in the Gerrit tutorial. But when I run the command *git pull origin master,* the following error is thrown: error: Pulling is not possible because you have unmerged files. hint: Fix them up in the work tree, and then use 'git add/rm <file>' hint: as appropriate to mark resolution and make a commit. fatal: Exiting because of an unresolved conflict. I would be glad if someone could help me with this issue Thanks in advance Sahaj Khandelwal

3 4

Delay in MediaWIki 1.35 Release and Branch Cut
by Cindy Cicalese 27 Mar '20

27 Mar '20

Due to the uncertainty resulting from the COVID-19 pandemic, we have decided to temporarily push back the release of MediaWiki 1.35. Especially since MediaWiki 1.35 is a long term support (LTS) release, we want to take the time to give the release appropriate resources and attention. We will not be cutting the REL1_35 branch on April 7 as we had previously announced. We will be making another announcement no later than Friday, May 29 giving an update on when we will be cutting the REL1_35 branch and moving towards the release of MediaWiki 1.35. We appreciate your patience in these difficult times. Wishing you health, Cindy ______________________________ Cindy Cicalese Product Manager, MediaWiki Platform Wikimedia Foundation

1 0

MediaWiki Extensions and Skins Security Release Supplement (1.31.7/1.33.3/1.34.1)
by Scott Bassett 26 Mar '20

26 Mar '20

Greetings- With the security/maintenance release of MediaWiki 1.31.7/1.33.3/1.34.1 [0], we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: == MobileFrontend == + (T240502, No CVE) - List known raw html messages <https://gerrit.wikimedia.org/r/q/I301aee4093fe2b0e8f6dfe5422226bb80af1de2> == WikibaseMediaInfo == + (T240773, CVE-2020-6163) - Escape labels in HTML output <https://gerrit.wikimedia.org/r/q/If47903f11645e52d56a875be4c03de47400cef0> == Widgets == + (T245850, CVE-2020-9382) - Title::newFromText() is not safe for user input <https://gerrit.wikimedia.org/r/q/I953e060bc6994ffdba9f380c98173f53f8ca1ea8> == GlobalBlocking == + (T229731, CVE-2020-10534) - Apply most specific global block <https://gerrit.wikimedia.org/r/q/I9cc5fb2c08c78bbd797a5fc6d89f4577c8cc118> The Wikimedia Security Team recommends updating these extensions and/or skins to the current master branch or relevant, supported release branch [2] as soon as possible. Some of the referenced Phabricator tasks above _may_ still be private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns regarding this update, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator [3]. [0] https://lists.wikimedia.org/pipermail/wikitech-l/2020-March/093243.html [1] https://phabricator.wikimedia.org/T240400 [2] https://www.mediawiki.org/wiki/Version_lifecycle [3] https://www.mediawiki.org/wiki/Reporting_security_bugs -- Scott Bassett sbassett(a)wikimedia.org

1 0

Security and maintenance release: 1.31.7 / 1.33.3 / 1.34.1
by Sam Reed 26 Mar '20

26 Mar '20

1 0

Security pre-release announcement: 1.31.7 / 1.33.3 / 1.34.1
by Sam Reed 25 Mar '20

25 Mar '20

Hi all, Tomorrow we will be issuing a security and maintenance release to all supported branches of MediaWiki. The new releases will be: - 1.34.1 - 1.33.3 - 1.31.7 This will resolve two minor issues in MediaWiki core, and also includes some fixes previously committed to git, including minor security and hardening patches along with bug fixes included for maintenance reasons. We've noted that these issues are minor, and as such you don't need to apply them as quickly as with other security releases, if you're unable to do so. We therefore decided to continue with getting the security (and maintenance) release out for this quarter as planned, even with the global situation as is. We will make the fixes available in these respective release branches, and also master. Tarballs will be available for the above mentioned point releases as well. A summary of some of the security fixes that have gone into non bundled MediaWiki extensions will also follow. Thanks! Sam

1 0

Mediawiki behind Nginx reverse proxy
by freebsd＠tango.lu 22 Mar '20

22 Mar '20

Hello, I find this strange that the there is no proper documentation on how to configure nginx to reverse proxy to mediawiki. My setup: https://wiki.domain.com Internal http://192.168.1.5/wiki location / { # rewrite /(.*) /wiki/$1 break; # rewrite ^/(.*)$ /wiki/index.php?title=$1&$args; rewrite /(.*) /wiki/$1 break; rewrite ^/$ /wiki/ permanent; rewrite ^/(.+)$ /wiki/index.php?title=$1 last; proxy_pass http://192.168.1.5; proxy_redirect off; proxy_set_header Host $host; } I have tried a couple of things, I usually end up 404 - Not Found from the outside where I see a GET /wiki/ HTTP/1.0" 301 0 " in the internal servers log. Any idea how to set this up properly?

1 0

Category displaying article/page links question
by LCJones - Jonesipedia 19 Mar '20

19 Mar '20

Folks, MediaWiki: 1.35.0-wmf.24 (d0f62b0) PHP:7.3.15-3+ubuntu18.04.1+deb.sury.org+1 (fpm-fcgi) MariaDB:10.3.10-MariaDB-1:10.3.10+maria~bionic-log ICU:65.1 LuaSandbox:3.0.3 Lua:5.1.5 This is a single user rig with Read Only public interface. runJobs.php is cron'd up. With: $wgJobRunRate = 0; $wgRunJobsAsync = false; Seems I've run in to this before but I can't remember what I did to resolve it. As Admin/User Creating a new page and including it to a category. Being logged in as user, the page is properly displayed in the category as it should be. However, after logging out, the category doesn't seem to be updating and does not display the new page. Updating/rebuild mw cache and clearing browser cache does not resolve. I'm stumped. Dangit. What am I missing? Would appreciate your thoughts and guidance. chap jonesipedia

1 0

New episode of Between the Brackets: Ad Strack van Schijndel
by Yaron Koren 18 Mar '20

18 Mar '20

Hi everyone, A new episode of the MediaWiki podcast "Between the Brackets" was released yesterday: an interview with Ad Strack van Schijndel, the founder of the Dutch MediaWiki consulting company Wikibase Solutions (which, despite its name, does not use Wikibase - though they do use the Semantic MediaWiki and Cargo extensions quite a bit). You can listen to the entire episode here: http://betweenthebrackets.libsyn.com/episode-56-ad-strack-van-schijndel -Yaron

1 0

Cache problem with extension images
by Julius Heyne 18 Mar '20

18 Mar '20

*Question:* 1. Does anyone know what process on server side results in loaded .png files with a hash appended, like "logo.png?61f99" instead of "logo.png"? 2. Has anyone had problems with this in the sense that instead of supplying desired images, the cache is responding with same image for different images? *Problem Example:* maps extension needs two icons: marker-icon.png, marker-shadow.png. The browser loads: "marker-icon.png?2273e%22)marker-icon.png" and "marker-icon.png?2273e%22)marker-shadow.png", but both files end up looking like "marker-icon.png" image. *Version:* MW version:1.34.0 PHP version: 7.3.15 (same problem with 7.4.3) SMW version (if applicable): 3.1.5 Apache: 2.4.41 Ubuntu server: 16.04 Any help is greatly appreciated and will be shared with Maps devl team. With regards Julius

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l March 2020