[ProgSoc] Fwd: [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2
Leefe
3trk at progsoc.org
Thu Jul 31 09:43:15 EST 2014
New security update for MediaWiki
Leefe
http://www.progsoc.org/~3trk/
Begin forwarded message:
> From: Markus Glaser <glaser at hallowelt.biz>
> Date: 31 July 2014 6:10:55 AM AEST
> To: "mediawiki-announce at lists.wikimedia.org" <mediawiki-announce at lists.wikimedia.org>
> Subject: [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2
>
> Hello everyone,
>
> I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email.
>
> == Security ==
> * (bug 68187) SECURITY: Prepend jsonp callback with comment.
> * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked.
> * (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput.
>
> == Bugfixes in 1.23.2 ==
> * (bug 68313) Preferences: Turn stubthreshold back into a combo box.
> * (bug 65214) Fix initSiteStats.php maintenance script.
> * (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL.
>
> == Bugfixes in 1.22.9 ==
> * (bug 59147) The img_metadata field was not being decoded from bytea into text.
>
> Full release notes for 1.23.2:
> <https://www.mediawiki.org/wiki/Release_notes/1.23>
>
> Full release notes for 1.22.9:
> <https://www.mediawiki.org/wiki/Release_notes/1.22>
>
> Full release notes for 1.19.18:
> <https://www.mediawiki.org/wiki/Release_notes/1.19>
>
> Public keys:
> <https://www.mediawiki.org/keys/keys.html>
>
> **********************************************************************
> 1.23.2
> **********************************************************************
> Download:
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz
>
> Patch to previous version (1.23.1):
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz
>
> GPG signatures:
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig
>
> Note:
> There is no i18n patch as there are no changes in translation.
>
> **********************************************************************
> 1.22.9
> **********************************************************************
> Download:
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz
>
> Patch to previous version (1.22.8):
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz
>
> GPG signatures:
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.9.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz.sig
>
> Note:
> There is no i18n patch as there are no changes in translation.
>
> **********************************************************************
> 1.19.18
> **********************************************************************
> Download:
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz
>
> Patch to previous version (1.19.17):
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz
>
> GPG signatures:
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.18.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz.sig
>
> Note:
> There is no i18n patch as there are no changes in translation.
>
>
> Markus Glaser
> (Release Management Team)
>
> P.S.: If you are interested in shaping the future of MediaWiki, come join our session about a MediaWiki user group at Wikimania: http://wikimania2014.wikimedia.org/wiki/Submissions/How_about_a_MediaWiki_Consortium%3F . Email us at glaser at hallowelt.biz or mah at nichework.com if you would like to participate remotely.
>
> _______________________________________________
> MediaWiki announcements mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
More information about the Progsoc
mailing list