Re: [MediaWiki-l] Allowing HTML

2020-09-24 Thread eQuality Technology
Thank you! On Thu, Sep 24, 2020, 9:50 PM Tim Starling wrote: > I enabled HTML email on this list, since most people were OK with me > enabling it on wikitech-l in the recent discussion there, and the audience > is much the same. > > -- Tim Starling >

[MediaWiki-l] Allowing HTML

2020-09-24 Thread Tim Starling
I enabled HTML email on this list, since most people were OK with me enabling it on wikitech-l in the recent discussion there, and the audience is much the same. -- Tim Starling ___ MediaWiki-l mailing list To unsubscribe, go to:

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Tim Starling
On 25/9/20 10:56 am, Jeffrey Walton wrote: > Thanks. > > Out of curiosity, why is "unknown" used instead of "localhost"? > localhost is a standard hostname. Are there negative side effects from > using localhost? It's just used for debugging, so it doesn't matter if it's a standard hostname.

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Jeffrey Walton
On Thu, Sep 24, 2020 at 8:53 PM Brian Wolff wrote: > > > > On Thursday, September 24, 2020, Jeffrey Walton wrote: >> >> On Thu, Sep 24, 2020 at 6:37 PM Tim Starling wrote: >> > >> > On 25/9/20 5:34 am, Jeffrey Walton wrote: >> > > Our site is at https://www.cryptopp.com/wiki. >> > > >> > >

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Brian Wolff
On Thursday, September 24, 2020, Jeffrey Walton wrote: > On Thu, Sep 24, 2020 at 6:37 PM Tim Starling > wrote: > > > > On 25/9/20 5:34 am, Jeffrey Walton wrote: > > > Our site is at https://www.cryptopp.com/wiki. > > > > > > Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Jeffrey Walton
On Thu, Sep 24, 2020 at 6:37 PM Tim Starling wrote: > > On 25/9/20 5:34 am, Jeffrey Walton wrote: > > Our site is at https://www.cryptopp.com/wiki. > > > > Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the > > following at the top: > > > > > > Warning: php_uname() has been

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Tim Starling
On 25/9/20 5:34 am, Jeffrey Walton wrote: > Hi Everyone, > > Our site is at https://www.cryptopp.com/wiki. > > Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the > following at the top: > > > Warning: php_uname() has been disabled for security reasons in >

[MediaWiki-l] Maintenance release: 1.31.10 / 1.34.4

2020-09-24 Thread Sam Reed
The 1.31.10 and 1.34.4 versions fix the issue with the backports in the 1.31.9 and the 1.34.3 releases. The patches linked here need applying on top of the previous patches for 1.31.9 and 1.34.3. See the previous email for those patches. The full downloads here contain all the previous fixes from

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Valerio Bozzolan via MediaWiki-l
Uhm, I like people who harden shared hosting environments but I do not understand how restricting yourself should give you any pratical security advantage. I'm not aware of any security concern involving php_uname(). Are you? Having said I'm not a fan of [[security through obscurity]], but

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Jeffrey Walton
On Thu, Sep 24, 2020 at 5:17 PM Valerio Bozzolan via MediaWiki-l wrote: > > Well, > > In the meanwhile I would suggest to contact your hosting provider: they > should remove the php_uname() function from the disabled_functions directive. That's us. We run a hardened installation:

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Valerio Bozzolan via MediaWiki-l
Well, In the meanwhile I would suggest to contact your hosting provider: they should remove the php_uname() function from the disabled_functions directive. Cheers On September 24, 2020 10:30:01 PM GMT+02:00, Jeffrey Walton wrote: >On Thu, Sep 24, 2020 at 3:34 PM Jeffrey Walton >wrote: >> >>

Re: [MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Jeffrey Walton
On Thu, Sep 24, 2020 at 3:34 PM Jeffrey Walton wrote: > > Hi Everyone, > > Our site is at https://www.cryptopp.com/wiki. > > Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the > following at the top: > > > Warning: php_uname() has been disabled for security reasons in >

[MediaWiki-l] php_uname() has been disabled for security reasons...

2020-09-24 Thread Jeffrey Walton
Hi Everyone, Our site is at https://www.cryptopp.com/wiki. Since the Mediawiki 1.34.3 upgrade, the wiki serves each page with the following at the top: Warning: php_uname() has been disabled for security reasons in /var/www/html/w/includes/GlobalFunctions.php on line 1333 ... Any ideas

[MediaWiki-l] (no subject)

2020-09-24 Thread Jeffrey Walton
Hi Everyone, I updated from Mediawiki 1.34.2 to Mediawiki 1.34.3 on CentOS 7, x86_64, fully patched. There were some warnings during the upgrade: Package wikimedia/password-blacklist is abandoned, you should avoid using it. Use wikimedia/common-passwords instead. Package

Re: [MediaWiki-l] Security and maintenance release: 1.31.9 / 1.34.3

2020-09-24 Thread Sam Reed
Sorry all for the inconvenience. There's a couple of issues relating to some of the backports in the User/ActorMigration changes. As such, I would advise against applying these patches unless you really know what you are doing. Fixes are being worked on, and will hopefully be released in a few

[MediaWiki-l] Security and maintenance release: 1.31.9 / 1.34.3

2020-09-24 Thread Sam Reed
I would like to announce the release of MediaWiki 1.34.3, and 1.31.9! These releases also serve as a maintenance release for these branches. While tarballs have already been uploaded, git tags will follow later on today. An "MediaWiki Extensions Security Release Supplement" email will follow