A RetroSearch Logo

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Search Query:

Showing content from https://www.mediawiki.org/wiki/Special:MyLanguage/MediaWiki_1.5 below:

Release notes/1.5 - MediaWiki

Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it *off* if you can.

March 26, 2006 MediaWiki 1.5.8 is a security and bugfix maintenance release. A bug in decoding of certain encoded links could allow injection of raw HTML into page output; this could potentially lead to XSS attacks. Some minor UI fixes were also made, see the change log at the bottom of this file.

March 2, 2006 MediaWiki 1.5.7 is a bugfix maintenance release. Most importantly, a security issue in the installer has been fixed. The bug affects new installations of 1.5.6 only. If the user specified the MySQL root password, to allow the installer to create an unprivileged account, the installer would not only create the new account but also change the root password to be equal to the password of the new account. Anyone affected by this bug will need to change the root password back manually. For information about how to change passwords in MySQL please see: http://dev.mysql.com/doc/refman/5.1/en/passwords.html This version includes fixes for compatibility with Internet Explorer 7 beta 2, and various other bugs; see the full changelog at the end of the release notes.

January 19, 2006 MediaWiki 1.5.6 is a security and bugfix maintenance release. A bug in edit comment formatting could send PHP into an infinite loop if certain malformed links were included. In most installations, this would cause the script to fail after PHP's 30-second failsafe timeout. Some improvements have been made to the installer which should make installation possible on a system with a broken MySQL "root" account. For several other minor fixes, see the complete changelog at the end of this file.

January 5, 2006 MediaWiki 1.5.5 is a security and bugfix maintenance release. Detection for uploads of Windows Metafile (.wmf) images has been added to help protect against a client-side vulnerability in unpatched Microsoft Windows operating systems. Sites which have enabled uploads and added non-standard file types (such as .ogg, .doc, or .pdf) should upgrade to this release to ensure that malicious .wmf files can't be uploaded with a fake extension; such files could put visitors to the site at risk. For more details on this, see: http://en.wikipedia.org/wiki/Windows_Metafile_vulnerability Additionally, a maintenance script removeUnusedAccounts.php has been added; this replaces an older Perl script which had not been updated for the new schema in 1.5.

December 21, 2005 MediaWiki 1.5.4 is a security and bugfix maintenance release. A hardcoded internal placeholder string has been replaced with a random one. This closes a hole where security checks in inline style attributes could be bypassed, injecting JavaScript code that could execute in Microsoft Internet Explorer. Other browsers would not be vulnerable. Several minor fixes are included in this release, most notably a fix to clear the "you have new messages" flag properly for usernames containing spaces when e-mail notification is enabled. See the changelog at the end of the release notes for a full list of fixes.

December 4, 2005 MediaWiki 1.5.3 is a security and bugfix maintenance release. Validation of the user language option was broken by a code change in May 2005, opening the possibility of remote code execution as this parameter is used in forming a class name dynamically created with eval(). The validation has been corrected in this version. All prior 1.5 release and prelease versions are affected; 1.4 and earlier and not affected. Additionally several bugs have been fixed; see the changelog later in this file for a complete list.

November 2, 2005 MediaWiki 1.5.2 is a bugfix maintenance release. A change in PHP 4.4.1 and PHP 5.1.0RC broke handling of extension and <pre> sections, causing garbage data to be inserted in output and saved edits. This version works around the change. Several other glitches with MySQL 5.0 and PHP 5.0.5 were also fixed; see the change log below for a complete list.

October 26, 2005 MediaWiki 1.5.1 is a bugfix and security maintenance release, and is a recommended upgrade for all installations. This release includes further corrections to the inline CSS style sanitation which works around a JavaScript "feature" on Microsoft Internet Explorer. Users of Microsoft Internet Explorer for Windows may be vulnerable to XSS injections on prior versions; users of standards-compliant browsers are not vulnerable. Major fixes include:

October 5, 2005 MediaWiki 1.5.0 is the new stable release branch of MediaWiki, and is recommended for all new installations. Any wikis running a 1.5 beta or release candidate are strongly recommended to upgrade to the final release, which includes a number of bug fixes and a security fix for CSS bugs in Microsoft Internet Explorer. IMPORTANT: Running a 1.3 or 1.4 wiki and don't want to jump to 1.5 yet? Be sure to upgrade to 1.3.17 or 1.4.11, also released today. Versions prior to 1.3.16 and 1.4.10 have a serious data corruption bug which is triggered by a spambot known to operate in the wild.

What's new in 1.5?[edit] Major schema change.

The core table schema has changed significantly (see Proposed Database Schema Changes/October 2004). This should make better use of the database's cache and disk I/O, and make significantly speed up rename and delete operations on pages with very long edit histories. Unfortunately this does mean upgrading a wiki of size from 1.4 will require some downtime for the schema restructuring, but future storage backend changes should be able to integrate into the new system more easily.

The current revision of a page now has a permanent oldid number assigned immediately, and the id numbers are now preserved across deletion/undeletion. A permanent reference to the current revision of a page is now just a matter of going to the 'History' tab and copying the first link in the list.

Renames of pages are now recorded in Special:Log and the page history. A handy revert link is available from the log for sysops.

Ever lost track of what you'd done so far during an edit? A 'Show diff' button on the edit page now makes it easy to remember.

It's now possible to specify the final filename of an upload distinct from the original filename on your disk. An image link for a missing file will now take you straight to the upload page. More metadata is pre-extracted from uploaded images, which will ease pressure on disk or NFS volumes used to store images. EXIF metadata is displayed on the image description page if PHP is configured with the necessary module. If .svg files are added to the upload whitelist, you can choose to render them to rasterized .png images for inline display using one of several external helper programs. See DefaultSettings.php for SVG options.

There are some changes to the user permissions system, with assignable groups. Note that this does *not* allow you to make pages which are only accessible to certain groups. For details see: http://meta.wikimedia.org/wiki/Help:User_rights

User-to-user e-mail can now be restricted to require a mail-back confirmation first to reduce potential for abuse with false addresses. Updates to user talk pages and watchlist entries can optionally send e-mail notifications.

A somewhat experimental interface for hooking in an external editor application is included. And... A bunch of stuff we forgot to mention.

Latin-1: Wikis must now be encoded in Unicode UTF-8; this has been the default for some time, but some languages could optionally be installed in Latin-1 mode. This is no longer supported. You can check if your current wiki is in Latin-1 mode by using your browser's "view source"; look for a line like this:

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

If it says charset=utf-8, you're ready. If it says charset=iso8859-1, you may need to convert your data. (English-language wikis avoiding any accented characters may be able to get away without conversion.) MySQL 3.x: Some optimization hacks for MySQL 3.x have been removed as part of the schema clean-up (specifically, the inverse_timestamp fields). MediaWiki 1.5 may still run on 3.x, but wikis of non-trivial size should very seriously consider upgrading to a more modern release. MySQL 3.x support will probably be entirely dropped in the next major release. Special:Maintenance These tools were, ironically enough, not really maintained. This special page has been removed; insofar as some of its pieces were useful and haven't already been supplanted by other special pages they should be rewritten inan efficient and safe manner in the future.

Upgrade: Wikis in Latin-1 encoding are no longer supported; only Unicode UTF-8. A new option $wgLegacyEncoding is provided to allow on-the-fly recoding of old page text entries, but other metadata fields (titles, comments etc) need to be pre-converted. The standard upgrade process does not yet fully automate this, but you can try the alternate partial-upgrader in upgrade1_5.php. The upgrade from 1.4 to 1.5 schema has not been tested for all cases, so it's possible you may experience problems in some combinations. Backups: The text entries of deleted pages are no longer removed from the main text table on deletion. If you provide public backup dumps of your databases, you will probably want to use the new XML-format dump generator, available as maintenance/dumpBackup.php. For more information on how we run our own public data dumps at Wikimedia, see http://meta.wikimedia.org/wiki/Data_dumps PostgreSQL: The table definitions for PostgreSQL install are out of date. PostgreSQL support may return in later releases, pending appropriate patches. MySQL 4.1+: Some users may encounter installation problems with MySQL 4.1 or higher due to strange charset encoding / collation configurations. Try setting to 'latin1' or 'utf8' if you encounter problems.

August 29, 2005 MediaWiki 1.5rc4 is a preview release of the new 1.5 release series. It fixes compatibility with PHP 5.1, and corrects two cross-site scripting security bugs:

August 24, 2005 MediaWiki 1.5rc3 is a preview release of the new 1.5 release series. It fixes several major problems in 1.5rc2:

August 23, 2005 MediaWiki 1.5rc2 is a preview release of the new 1.5 release series. Numerous bug fixes since last beta, plus a security fix; see change log below for full details. A flaw in the interaction between extensions and HTML attribute sanitization was discovered which could allow unauthorized use of offsite resources in style sheets, and possible exploitation of a JavaScript injection feature on Microsoft Internet Explorer. This version expands the returned text and properly checks it before output. A 1.5rc1 release was mistakenly made from the incorrect source code branch; 1.5rc2 is identical to the actual 1.5rc1 in revision control except for version number.

July 30, 2005 MediaWiki 1.5 beta 4 is a preview release of the new 1.5 release series. A number of bugs have been fixed since beta 3; see the full changelist below.

July 7, 2005 MediaWiki 1.5 beta 3 is a preview release of the new 1.5 release series, with a security update over beta 2. Incorrect escaping of a parameter in the page move template could be used to inject JavaScript code by getting a victim to visit a maliciously constructed URL. Users of vulnerable releases are recommended to upgrade to this release. Vulnerable versions:

This release also includes several bug fixes and localization updates. See the changelog at the end of this file for a detailed list.

July 5, 2005 MediaWiki 1.5 beta 2 is a preview release of the new 1.5 release series. While most exciting new bugs should have been ironed out at this point, third-party wiki operators should probably not run this beta release on a public site without closely following additional development. Anyone who has been running beta 1 is very very strongly advised to upgrade to beta 2, as it fixes many bugs from the previous beta including a couple of HTML and SQL injections. This release should be followed by one or two release candidates and a 1.5.0 final within the next few weeks. Beta upgraders, note there are some minor database changes. For upgrades from 1.4, see the file UPGRADE for details on significant database and configuration file changes. Beta 2 includes a preliminary command-line XML wiki dump importer tool, maintenance/importDump.php, paired with maintenance/dumpBackup.php. These use the same format as Special:Export and Special:Import, able to package a wiki's entire page set independent of the backend database and compression format.

June 26, 2005 MediaWiki 1.5 beta 1 is a preview release, pretty much feature complete, of the new 1.5 release series. There are several known and likely a number of unknown bugs; it is not recommended to use this release in a production environment but would be recommended for testing in mind of an upcoming deployment. A number of significant changes have been made since the alpha releases, including database changes and a reworking of the user permissions settings. See the file UPGRADE for details of upgrading and changing your prior configuration settings for the new system.

June 3, 2005 MediaWiki 1.5 alpha 2 includes a lot of bug fixes, feature merges, and a security update. Incorrect handling of page template inclusions made it possible to inject JavaScript code into HTML attributes, which could lead to cross-site scripting attacks on a publicly editable wiki. Vulnerable releases and fix:

May 3, 2005 This is a testing preview release, being put out mainly to aid testers in finding installation bugs and other major problems. It is strongly recommended NOT to run a live production web site on this alpha release.

Smaller changes since 1.4[edit]

Various bugfixes, small features, and a few experimental things:

Changes since 1.5alpha1[edit] Changes since 1.5alpha2[edit] Changes since 1.5beta4[edit] Changes since 1.5rc2[edit] Changes since 1.5rc3[edit] Changes since 1.5rc4[edit] Changes since 1.5.0[edit] Changes since 1.5.1[edit] Changes since 1.5.2[edit] Changes since 1.5.3[edit] Changes since 1.5.4[edit] Changes since 1.5.5[edit] Changes since 1.5.6[edit] Changes since 1.5.7[edit] Changes since 1.5.8[edit]

Some output, particularly involving user-supplied inline HTML, may not produce 100% valid or well-formed XHTML output. Testers are welcome to set $wgMimeType = "application/xhtml+xml"; to test for remaining problem cases, but this is not recommended on live sites. (This must be set for MathML to display properly in Mozilla.) For notes on 1.4.x and older releases, see HISTORY

Online documentation[edit]

Documentation for both end-users and site administrators is currently being built up on Meta-Wikipedia, and is covered under the GNU Free Documentation License: http://meta.wikipedia.org/wiki/Help:Contents

A MediaWiki-l mailing list has been set up distinct from the Wikipedia wikitech-l list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l A low-traffic announcements-only list is also available: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce It's highly recommended that you sign up for one of these lists if you're going to run a public MediaWiki, so you can be notified of security fixes.

There's usually someone online in the IRC channel #mediawiki connect.

RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4