Bug 781514

Summary: mediawiki 1.18.1 is available
Product: [Fedora] Fedora Reporter: Sander Hoentjen <sander>
Component: mediawikiAssignee: Michael Cronenworth <mike>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: rawhideCC: axel.thimm, ewoud+redhat, kielogl, mdunphy, muczyjoe, vedran, volker27
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-27 20:45:03 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Sander Hoentjen 2012-01-13 16:20:12 UTC
Description of problem:
Would it be possible for you to update mediawiki to 1.18.1 in Fedora? Also EPEL would benefit from this update.

Comment 1 Vedran Miletić 2012-05-03 22:55:27 UTC
1.19 already. Any chance at least for Fedora 17 or 18?

Comment 2 Michael 2012-09-14 16:51:58 UTC
+1 to this. 

This package has stagnated since May 2011 -- well over a year: http://koji.fedoraproject.org/koji/packageinfo?packageID=2514

There have been a number of security flaws fixed since then, see: https://www.mediawiki.org/wiki/News

It's a bad idea to continue distributing ancient versions of mediawiki with numerous security flaws. It makes both Fedora and mediawiki look bad. 

If there is not enough time to keep this package up to date then please consider dropping mediawiki from the Fedora repositories. The users will have to deal with the tarball from upstream but at least they won't be running outdated versions with security flaws.

Comment 3 Ewoud Kohl van Wijngaarden 2012-09-14 16:55:58 UTC
I'd like to point out that there's mediawiki119 as well (F18, F19 and EL6): http://koji.fedoraproject.org/koji/packageinfo?packageID=13960

Maybe you're right that plain mediawiki should be dropped since it receives no security updates.

Comment 4 Vedran Miletić 2012-09-14 18:50:25 UTC
Perhaps spec from mediawiki119 should be used for updating mediawiki, and mediawiki119 should be dropped instead.

Comment 5 Fedora Admin XMLRPC Client 2013-02-27 19:16:04 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 6 Michael Cronenworth 2013-02-27 20:45:03 UTC
Coming soon to a Fedora repo near you...

*** This bug has been marked as a duplicate of bug 909908 ***