Overview

Request 1007289 accepted

- Update to Mediawiki 1.37.6
Maintenance release
* Fix missing use statement from backport of fix for T307278.
- Changes in Mediawiki 1.37.5
Security and maintenance release
* Localisation updates.
* (T312519, T312520) Parser::extensionSubstitution() Don't run
substr() on null.
* (T287564) populateInterwiki: Include not null columns
iw_api/iw_wikiid.
* (T312302) SpecialRedirect: Don't pass null to explode.
* RemoveInvalidEmails: Fix quoting for postgres.
* (T312678) import: UploadSourceAdapter::stream_read() don't
pass null to strlen().
* (T312300) SpecialDiff: Don't pass null to explode().
* (T312680) parser: Fix CoreParserFunctions::urlencode() null
coalescence $arg.
* (T289926) Handle null passed to wfShorthandToInteger()
and Html::element().
* (T289926) Ensure that strlen() does not get passed a
(valid) null.
* (T312301) SpecialDiff: Don't pass null to trim().
* Hooks: Use more meaningful name for SkinAfterPortlet hook
parameter.
* (T289926) Ensure we don't pass null to mb_strlen.
* (T312305, T311572, T311571, T311578) HtmlForm: Null
coalescence in trim() calls.
* (T289926) site: Consistently return null from
Site::getDomain().
* (T307304, T289879) filebackend,jobqueue: Add signature for
FilterIterator::accept().
* (T312183) rdbms: Adapt hasOrMadeRecentPrimaryChanges test
mock for PHP 8.1.
* Add application/vnd.ms-opentype to MIME list.
* Allow composer/installers plugin in composer.json.
* Change type hints for BatchRowIterator and NotRecursiveIterator
for compatibility with PHP 8.1.
* (T313663) [php8.1] Change override of $wgResourceBasePath for
CSP tests.
* (T313663) parser: Mock WikiPage::getContentModel in
ParserCacheTest to fix php8.1.
* (T313663) [php8.1] Make WikiImporterFactoryTest use better
mock for ImportSource.
* Fix tests so getName() doesn't return null.
* (T313663) [php8] Don't use strlen on potentially null string.
* (T313663) [php8.1] Suppress test warning about providing null.
* (T313663) Parser will use current timestamp instead of null
if passed a RevisionRecord that does not have a timestamp.
* (T313663) Add explicit null check for $sha in FileBackend
[php8.1].
* (T313663) LogFormatter: Cast argument of ctype_digit to string
[php8.1].
* (T313663) Mock UserOptionsManager::getOption for php8.1.
* (T289879, T289926) Get rid of warnings on PHP 8.1.
* (T313663) Check for null return of preg_replace in
MediaWikiTitleCodec.
* (T313663) cast db name to string when checking if it is read
only [php8.1].
* (T313663) Avoid testing strlen on null in ApiQuerySiteinfo
[php 8.1 compat].
* Fix a couple deprecation warnings in the installer under
PHP 8.1.
* (T313663) Use default timezone UTC for SpecialWatchlistTest
[php 8.1].
* (T313663) Mock User::getTitleKey in SpecialPreferencesTest
[php 8.1].
* (T314096) Migrate use of ${var}-style string interpolation.
* (T314099) preprocessor: Add missing field declarations.
* (T313663, T313662) Make default value for optional args
{{PAGESINCAT:..}} be '' not null.
* (T314225) SpecialCategories: Null coalescene $par.
* (T314099) User: Allow dynamic properties on PHP 8.2.
* (T314397) SpecialBlock: Better handle null in
getTargetUserTitle.
* (T314099) phpunit: Fix trivial dynamic property usages
in tests.
* (T314405) UploadStash: Check if us_prop is set in the
fileMetadata.
* (T313663) Make ChangesListSpecialPageTest cast to string
for php 8.1.
* (T313663) Do not test giving a null fragment to
Title::makeTitle.
* (T314550) SpecialMergeHistory: Set timestamp to '' if no
mergepoint.
* (T314551) SpecialMergeHistory: Set defaults for target and
dest parameters.
* api: Add rel=nofollow to help examples.
* (T307613) Validate length of user email on
Special:ChangeEmail/Special:CreateAccount.
* (T314226) LoginSignupSpecialPage: Check if $value is a string
before length.
* (T314824) tests: Update parser test after i18n change.
* (T295958, T278847) MediaWiki-Docker: Switch PHP images to
PHP7.4.
* (T314906, T314907) SpecialBlock: Set defaults for
wpPageRestrictions and wpNamespaceRestrictions.
* (T315309) ImportStreamSource::newFromURL() Prevent passing
null to fwrite.
* (T315892) composer.json: Pin phpunit to 8.5.28.
* (T313049) Bump wikimedia/parsoid to v0.14.2.
* (T317750) session: Fix broken SessionTest case due to PHPUnit
dependency change.
* (T318079) SpecialEditTags: Set default value of wpTagsToRemove
to empty array.
* (T318460) SpecialChangeEmail: Set default for returntoquery.
* (T318307) Update docs for HTMLFormField::validate() to permit
all data types.
* (T316304, CVE-2022-41767) SECURITY: reassignEdits doesn't
update results in an IP range check on Special:Contributions.
* (T309894, CVE-2022-41765) SECURITY: HTMLUserTextField exposes
existence of hidden users.
* (T307278, CVE-2022-41766) SECURITY: On action=rollback the
message "alreadyrolled" can leak revision deleted user name.

Loading...

Request History
Carsten Ziepke's avatar

Kieltux created request

- Update to Mediawiki 1.37.6
Maintenance release
* Fix missing use statement from backport of fix for T307278.
- Changes in Mediawiki 1.37.5
Security and maintenance release
* Localisation updates.
* (T312519, T312520) Parser::extensionSubstitution() Don't run
substr() on null.
* (T287564) populateInterwiki: Include not null columns
iw_api/iw_wikiid.
* (T312302) SpecialRedirect: Don't pass null to explode.
* RemoveInvalidEmails: Fix quoting for postgres.
* (T312678) import: UploadSourceAdapter::stream_read() don't
pass null to strlen().
* (T312300) SpecialDiff: Don't pass null to explode().
* (T312680) parser: Fix CoreParserFunctions::urlencode() null
coalescence $arg.
* (T289926) Handle null passed to wfShorthandToInteger()
and Html::element().
* (T289926) Ensure that strlen() does not get passed a
(valid) null.
* (T312301) SpecialDiff: Don't pass null to trim().
* Hooks: Use more meaningful name for SkinAfterPortlet hook
parameter.
* (T289926) Ensure we don't pass null to mb_strlen.
* (T312305, T311572, T311571, T311578) HtmlForm: Null
coalescence in trim() calls.
* (T289926) site: Consistently return null from
Site::getDomain().
* (T307304, T289879) filebackend,jobqueue: Add signature for
FilterIterator::accept().
* (T312183) rdbms: Adapt hasOrMadeRecentPrimaryChanges test
mock for PHP 8.1.
* Add application/vnd.ms-opentype to MIME list.
* Allow composer/installers plugin in composer.json.
* Change type hints for BatchRowIterator and NotRecursiveIterator
for compatibility with PHP 8.1.
* (T313663) [php8.1] Change override of $wgResourceBasePath for
CSP tests.
* (T313663) parser: Mock WikiPage::getContentModel in
ParserCacheTest to fix php8.1.
* (T313663) [php8.1] Make WikiImporterFactoryTest use better
mock for ImportSource.
* Fix tests so getName() doesn't return null.
* (T313663) [php8] Don't use strlen on potentially null string.
* (T313663) [php8.1] Suppress test warning about providing null.
* (T313663) Parser will use current timestamp instead of null
if passed a RevisionRecord that does not have a timestamp.
* (T313663) Add explicit null check for $sha in FileBackend
[php8.1].
* (T313663) LogFormatter: Cast argument of ctype_digit to string
[php8.1].
* (T313663) Mock UserOptionsManager::getOption for php8.1.
* (T289879, T289926) Get rid of warnings on PHP 8.1.
* (T313663) Check for null return of preg_replace in
MediaWikiTitleCodec.
* (T313663) cast db name to string when checking if it is read
only [php8.1].
* (T313663) Avoid testing strlen on null in ApiQuerySiteinfo
[php 8.1 compat].
* Fix a couple deprecation warnings in the installer under
PHP 8.1.
* (T313663) Use default timezone UTC for SpecialWatchlistTest
[php 8.1].
* (T313663) Mock User::getTitleKey in SpecialPreferencesTest
[php 8.1].
* (T314096) Migrate use of ${var}-style string interpolation.
* (T314099) preprocessor: Add missing field declarations.
* (T313663, T313662) Make default value for optional args
{{PAGESINCAT:..}} be '' not null.
* (T314225) SpecialCategories: Null coalescene $par.
* (T314099) User: Allow dynamic properties on PHP 8.2.
* (T314397) SpecialBlock: Better handle null in
getTargetUserTitle.
* (T314099) phpunit: Fix trivial dynamic property usages
in tests.
* (T314405) UploadStash: Check if us_prop is set in the
fileMetadata.
* (T313663) Make ChangesListSpecialPageTest cast to string
for php 8.1.
* (T313663) Do not test giving a null fragment to
Title::makeTitle.
* (T314550) SpecialMergeHistory: Set timestamp to '' if no
mergepoint.
* (T314551) SpecialMergeHistory: Set defaults for target and
dest parameters.
* api: Add rel=nofollow to help examples.
* (T307613) Validate length of user email on
Special:ChangeEmail/Special:CreateAccount.
* (T314226) LoginSignupSpecialPage: Check if $value is a string
before length.
* (T314824) tests: Update parser test after i18n change.
* (T295958, T278847) MediaWiki-Docker: Switch PHP images to
PHP7.4.
* (T314906, T314907) SpecialBlock: Set defaults for
wpPageRestrictions and wpNamespaceRestrictions.
* (T315309) ImportStreamSource::newFromURL() Prevent passing
null to fwrite.
* (T315892) composer.json: Pin phpunit to 8.5.28.
* (T313049) Bump wikimedia/parsoid to v0.14.2.
* (T317750) session: Fix broken SessionTest case due to PHPUnit
dependency change.
* (T318079) SpecialEditTags: Set default value of wpTagsToRemove
to empty array.
* (T318460) SpecialChangeEmail: Set default for returntoquery.
* (T318307) Update docs for HTMLFormField::validate() to permit
all data types.
* (T316304, CVE-2022-41767) SECURITY: reassignEdits doesn't
update results in an IP range check on Special:Contributions.
* (T309894, CVE-2022-41765) SECURITY: HTMLUserTextField exposes
existence of hidden users.
* (T307278, CVE-2022-41766) SECURITY: On action=rollback the
message "alreadyrolled" can leak revision deleted user name.


Johannes Weberhofer's avatar

weberho accepted request

Thanks!

openSUSE Build Service is sponsored by