Log message:
Pullup ticket #5415 - requested by wen
www/mediawiki: security fix

Revisions pulled up:
- www/mediawiki/Makefile                                        1.66
- www/mediawiki/PLIST                                           1.32
- www/mediawiki/distinfo                                        1.50

---
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Thu May 11 14:13:41 UTC 2017

   Modified Files:
           pkgsrc/www/mediawiki: Makefile PLIST distinfo

   Log message:
   Update to 1.28.2(security update)

   Upstream changes:
   MediaWiki 1.28.2

   This is a security release of the MediaWiki 1.28 branch.

   Due to a mistake in packaging, the releases 1.27.2 and 1.28.1 did not
   contain the fix for SyntaxHighlight_GeSHi. This new release does
   contain that fix.

Log message:
Pullup ticket #5243 (second part) - requested by sevan
(various packages): build fix

Revisions pulled up:
- benchmarks/phoronix-test-suite/Makefile                       1.8
- finance/magento/Makefile                                      1.9
- mail/roundcube/Makefile                                       1.87
- meta-pkgs/php56-extensions/Makefile                           1.7
- meta-pkgs/php70-extensions/Makefile                           1.2
- meta-pkgs/php71-extensions/Makefile                           1.2
- mk/defaults/options.description                               1.526
- net/php-baikal/Makefile                                       1.10
- textproc/php-xsl/MESSAGE                                      deleted
- textproc/php-xsl/Makefile                                     1.10
- www/contao35/Makefile                                         1.28
- www/contao43/Makefile                                         1.10
- www/drupal7/Makefile                                          1.44
- www/drupal7/options.mk                                        1.4
- www/fengoffice/Makefile                                       1.38
- www/horde/Makefile                                            1.81
- www/mediawiki/Makefile                                        1.63
- www/moodle/Makefile                                           1.55
- www/php-concrete5/MESSAGE                                     1.8
- www/php-concrete5/Makefile                                    1.16
- www/php-nextcloud/MESSAGE                                     1.2
- www/php-nextcloud/Makefile                                    1.4
- www/php-owncloud/MESSAGE                                      1.20
- www/php-owncloud/Makefile                                     1.63
- www/php-tt-rss/MESSAGE                                        1.6
- www/php-tt-rss/Makefile                                       1.11
- www/phraseanet/MESSAGE                                        1.4
- www/phraseanet/Makefile                                       1.20

---
   Module Name:    pkgsrc
   Committed By:   fhajny
   Date:           Wed Apr  5 12:33:49 UTC 2017

   Modified Files:
           pkgsrc/benchmarks/phoronix-test-suite: Makefile
           pkgsrc/finance/magento: Makefile
           pkgsrc/mail/roundcube: Makefile
           pkgsrc/meta-pkgs/php56-extensions: Makefile
           pkgsrc/meta-pkgs/php70-extensions: Makefile
           pkgsrc/meta-pkgs/php71-extensions: Makefile
           pkgsrc/mk/defaults: options.description
           pkgsrc/net/php-baikal: Makefile
           pkgsrc/textproc/php-xsl: Makefile
           pkgsrc/www/contao35: Makefile
           pkgsrc/www/contao43: Makefile
           pkgsrc/www/drupal7: Makefile options.mk
           pkgsrc/www/fengoffice: Makefile
           pkgsrc/www/horde: Makefile
           pkgsrc/www/mediawiki: Makefile
           pkgsrc/www/moodle: Makefile
           pkgsrc/www/php-concrete5: MESSAGE Makefile
           pkgsrc/www/php-nextcloud: MESSAGE Makefile
           pkgsrc/www/php-owncloud: MESSAGE Makefile
           pkgsrc/www/php-tt-rss: MESSAGE Makefile
           pkgsrc/www/phraseanet: MESSAGE Makefile
   Removed Files:
           pkgsrc/textproc/php-xsl: MESSAGE

   Log message:
   Remove traces of textproc/php-dom which is not needed anymore, now that
   dom is built into PHP. Bump resp. PKGREVISION.

Log message:
Pullup ticket #5257 - requested by wen
www/mediawiki: security update

Revisions pulled up:
- www/mediawiki/Makefile                                        1.64
- www/mediawiki/PLIST                                           1.31
- www/mediawiki/distinfo                                        1.49

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Sun Apr  9 01:26:46 UTC 2017

   Modified Files:
           pkgsrc/www/mediawiki: Makefile PLIST distinfo

   Log message:
   Update to 1.18.1

   Upstream changes:
   MediaWiki 1.28.1
   Changes since 1.28.0

       $wgRunJobsAsync is now false by default (T142751). This change
   only affects wikis with $wgJobRunRate > 0.
       Fix fatal from "WaitConditionLoop" not being found, experienced
   when a wiki has more than one database server setup.
       (T152717) Better escaping for PHP mail() command
       (T154670) A missing method causing the MySQL installer to fatal in
   rare circumstances was restored.
       (T154672) Un-deprecate ArticleAfterFetchContentObject hook.
       (T158766) Avoid SQL error on MSSQL when using selectRowCount()
       (T145635) Fix too long index error when installing with MSSQL
       (T156184) $wgRawHtml will no longer apply to internationalization messages.
       (T160519) CACHE_ANYTHING will not be CACHE_ACCEL if no accelerator
   is installed.
       (T154872) Fix incorrect ar_usertext_timestamp index names in new
   1.28 installs.
       (T109140) (T122209) SECURITY: Special:UserLogin and Special:Search
   allow redirect to interwiki links.
       (T144845) SECURITY: XSS in SearchHighlighter::highlightText() when
   $wgAdvancedSearchHighlighting is true.
       (T125177) SECURITY: API parameters may now be marked as
   "sensitive" to keep their values out of the logs.
       (T150044) SECURITY: "Mark all pages visited" on the watchlist now
   requires a CSRF token.
       (T156184) SECURITY: Escape content model/format url parameter in message.
       (T151735) SECURITY: SVG filter evasion using default attribute
   values in DTD declaration.
       (T161453) SECURITY: LocalisationCache will no longer use the
   temporary directory in it's fallback chain when trying to work out
   where to write the cache.
       (T48143) SECURITY: Spam blacklist ineffective on encoded URLs
   inside file inclusion syntax's link parameter.

   To generate a diff of this commit:
   cvs rdiff -u -r1.63 -r1.64 pkgsrc/www/mediawiki/Makefile
   cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/mediawiki/PLIST
   cvs rdiff -u -r1.48 -r1.49 pkgsrc/www/mediawiki/distinfo