June 2019 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#3229][opened] Better handling for not configured when uninstalling client
by rcritten 07 Jun '19

07 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3229 Author: rcritten Title: #3229: Better handling for not configured when uninstalling client Action: opened PR body: """ Second crack at this. When uninstalling the client and it isn't configured we should return "not configured". When uninstall the client in context of the server we shouldn't error out. So in the case of on-master raise the exception with a SUCCESS error so it doesn't cause things to blow up, and revert the previous attempt. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3229/head:pr3229 git checkout pr3229

2 1

Fwd: [MediaWiki-announce] Security and maintenance release: 1.27.6 / 1.30.2 / 1.31.2 / 1.32.2
by Martin Kosek 07 Jun '19

07 Jun '19

FIY, I upgraded also www.freeipa.org (with other minor improvements). If there are problems - ping me. ---------- Forwarded message --------- From: Sam Reed <reedy(a)wikimedia.org> Date: Thu, Jun 6, 2019 at 5:52 PM Subject: [MediaWiki-announce] Security and maintenance release: 1.27.6 / 1.30.2 / 1.31.2 / 1.32.2 To: <mediawiki-announce(a)lists.wikimedia.org>, < wikitech-l(a)lists.wikimedia.org>, <mediawiki-l(a)lists.wikimedia.org> Hi all, I would like to announce the release of MediaWiki 1.32.2, 1.31.2, 1.30.2 and 1.27.6! These releases fix 11 security issues in core (not 12 as reported in the pre-release announcement. This was a mistake, sorry!) and also includes some previously committed to git as minor security and hardening patches. Download links are given at the end of this email. Patches will be pushed to Gerrit after this email is sent, and will land into the relevant branches as fast as our CI infrastructure allows. Git tags will follow soon after. All related tasks will be made public in Phabricator too in the following few hours. Please note that December 2018 was the End-Of-Life date for MediaWiki 1.30. This means that MediaWiki 1.30.2 will be the last security release for that version, barring any unforeseen issues. We would strongly encourage users of MediaWiki 1.30 to upgrade to MediaWiki 1.31 (LTS version), released in June 2018, or a yet newer version as soon as possible. MediaWiki 1.31 will be supported until July 2021. See <https://www.mediawiki.org/wiki/Version_lifecycle> for more information. June 2019 is the scheduled End-Of-Life date for MediaWiki 1.27 (the old LTS version). This means that MediaWiki 1.27.6 will be the last security release for that version, barring any unforeseen issues. We would strongly encourage users of MediaWiki 1.27 to upgrade to MediaWiki 1.31 (LTS version), released in June 2018, or a yet newer version as soon as possible. MediaWiki 1.31 will be supported until July 2021. See <https://www.mediawiki.org/wiki/Version_lifecycle> for more information. This release also serves as a maintenance release for these branches. == Security fixes == * (T197279, CVE-2019-12468) Directly POSTing to Special:ChangeEmail would allow for bypassing reauthentication, allowing for potential account takeover. * (T204729, CVE-2019-12473) Passing invalid titles to the API could cause a DoS by querying the entire `watchlist` table. * (T207603, CVE-2019-12471) Loading user JavaScript from a non-existent account allows anyone to create the account, and XSS the users' loading that script. * (T208881) blacklist CSS var(). * (T199540, CVE-2019-12472) It is possible to bypass the limits on IP range blocks (`$wgBlockCIDRLimit`) by using the API. * (T212118, CVE-2019-12474) Privileged API responses that include whether a recent change has been patrolled may be cached publicly. * (T209794, CVE-2019-12467) A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. * (T25227, CVE-2019-12466) An account can be logged out without using a token (CSRF). * (T222036, CVE-2019-12469) Exposed suppressed username or log in Special:EditTags. * (T222038, CVE-2019-12470) Exposed suppressed log in RevisionDelete page. * (T221739, CVE-2019-11358) Fix potential XSS in jQuery. == Links to all mentioned tasks == * https://phabricator.wikimedia.org/T197279 * https://phabricator.wikimedia.org/T204729 * https://phabricator.wikimedia.org/T207603 * https://phabricator.wikimedia.org/T208881 * https://phabricator.wikimedia.org/T199540 * https://phabricator.wikimedia.org/T212118 * https://phabricator.wikimedia.org/T209794 * https://phabricator.wikimedia.org/T222036 * https://phabricator.wikimedia.org/T222038 * https://phabricator.wikimedia.org/T221739 * https://phabricator.wikimedia.org/T25227 == Release notes == Full release notes for 1.27.6: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_27/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.27 Full release notes for 1.30.2: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_30/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.30 Full release notes for 1.31.2: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_31/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.31 Full release notes for 1.32.2: https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_29/RELEASE-NOTES… https://www.mediawiki.org/wiki/Release_notes/1.32 For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.6.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.6.tar.gz Patch to previous version (1.27.5): https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.6.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.6.tar.gz.… https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.6.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.6.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.30/mediawiki-1.30.2.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.30/mediawiki-core-1.30.2.tar.gz Patch to previous version (1.30.1): https://releases.wikimedia.org/mediawiki/1.30/mediawiki-1.30.2.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.30/mediawiki-core-1.30.2.tar.gz.… https://releases.wikimedia.org/mediawiki/1.30/mediawiki-1.30.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.30/mediawiki-1.30.2.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.2.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.2.tar.gz Patch to previous version (1.31.1): https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.2.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.31/mediawiki-core-1.31.2.tar.gz.… https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.31/mediawiki-1.31.2.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.2.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.32/mediawiki-core-1.32.2.tar.gz Patch to previous version (1.32.1): https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.2.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.32/mediawiki-core-1.32.2.tar.gz.… https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.32/mediawiki-1.32.2.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.2.tar.gz Download without bundled extensions: https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.2.tar.gz Patch to previous version (1.33.1): https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.2.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.33/mediawiki-core-1.33.2.tar.gz.… https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.33/mediawiki-1.33.2.patch.gz.sig Public keys: https://www.mediawiki.org/keys/keys.html _______________________________________________ MediaWiki announcements mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce

1 0

[freeipa PR#3230][opened] [testing_f28] Nightly PR
by freeipa-pr-ci 07 Jun '19

07 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3230 Author: freeipa-pr-ci Title: #3230: [testing_f28] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3230/head:pr3230 git checkout pr3230

1 1

[freeipa PR#3237][opened] [Backport][ipa-4-7]Tests for autounmembership feature
by kaleemsiddiqu 06 Jun '19

06 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3237 Author: kaleemsiddiqu Title: #3237: [Backport][ipa-4-7]Tests for autounmembership feature Action: opened PR body: """ Manual backport of #3162 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3237/head:pr3237 git checkout pr3237

2 1

[freeipa PR#3162][opened] Tests for autounmembership feature
by kaleemsiddiqu 06 Jun '19

06 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3162 Author: kaleemsiddiqu Title: #3162: Tests for autounmembership feature Action: opened PR body: """ New feature of autounmembership added in 389-ds-base https://pagure.io/389-ds-base/issue/50077 Signed-off-by: Kaleemullah Siddiqui <ksiddiqu(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3162/head:pr3162 git checkout pr3162

2 3

[freeipa PR#3227][opened] [testing_master] Nightly PR
by freeipa-pr-ci 06 Jun '19

06 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3227 Author: freeipa-pr-ci Title: #3227: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3227/head:pr3227 git checkout pr3227

1 1

[freeipa PR#3234][opened] [Backport][ipa-4-6] When reading SSH pub key don't assume last character is newline
by rcritten 05 Jun '19

05 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3234 Author: rcritten Title: #3234: [Backport][ipa-4-6] When reading SSH pub key don't assume last character is newline Action: opened PR body: """ This PR was opened automatically because PR #3228 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3234/head:pr3234 git checkout pr3234

1 1

[freeipa PR#3233][opened] [Backport][ipa-4-7] When reading SSH pub key don't assume last character is newline
by rcritten 05 Jun '19

05 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3233 Author: rcritten Title: #3233: [Backport][ipa-4-7] When reading SSH pub key don't assume last character is newline Action: opened PR body: """ This PR was opened automatically because PR #3228 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3233/head:pr3233 git checkout pr3233

1 1

[freeipa PR#3228][opened] When reading SSH pub key don't assume last character is newline
by rcritten 05 Jun '19

05 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3228 Author: rcritten Title: #3228: When reading SSH pub key don't assume last character is newline Action: opened PR body: """ The code was attempting to strip off any trailing newline and then calling lstrip() on the rest. This assumes that the key has a trailing newline. At best this can cause the last character of the comment to be lost. If there is no comment it will fail to load the key because it is invalid. Patch by Félix-Antoine Fortin <felix-antoine.fortin(a)calculquebec.ca> https://pagure.io/freeipa/issue/7959 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> There is a lot of very good analysis within the ticket. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3228/head:pr3228 git checkout pr3228

1 1

[freeipa PR#3226][opened] Stop using 389-ds legacy backup and restoration utilities
by rcritten 05 Jun '19

05 Jun '19

URL: https://github.com/freeipa/freeipa/pull/3226 Author: rcritten Title: #3226: Stop using 389-ds legacy backup and restoration utilities Action: opened PR body: """ Use dsctl instead, the modern replacement for ldif2db, db2ldif, bak2db and db2bak. https://pagure.io/freeipa/issue/7965 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3226/head:pr3226 git checkout pr3226

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel June 2019