[ProgSoc] Fwd: [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2

Leefe 3trk at progsoc.org
Thu Jul 31 09:43:15 EST 2014


New security update for MediaWiki

Leefe
http://www.progsoc.org/~3trk/

Begin forwarded message:

> From: Markus Glaser <glaser at hallowelt.biz>
> Date: 31 July 2014 6:10:55 AM AEST
> To: "mediawiki-announce at lists.wikimedia.org" <mediawiki-announce at lists.wikimedia.org>
> Subject: [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2
> 
> Hello everyone,
> 
> I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email. 
> 
> == Security ==
> * (bug 68187) SECURITY: Prepend jsonp callback with comment.
> * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked.
> * (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput.
> 
> == Bugfixes in 1.23.2 ==
> * (bug 68313) Preferences: Turn stubthreshold back into a combo box.
> * (bug 65214) Fix initSiteStats.php maintenance script.
> * (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL.
> 
> == Bugfixes in 1.22.9 ==
> * (bug 59147) The img_metadata field was not being decoded from bytea into text.
> 
> Full release notes for 1.23.2:
> <https://www.mediawiki.org/wiki/Release_notes/1.23>
> 
> Full release notes for 1.22.9:
> <https://www.mediawiki.org/wiki/Release_notes/1.22>
> 
> Full release notes for 1.19.18:
> <https://www.mediawiki.org/wiki/Release_notes/1.19>
> 
> Public keys:
> <https://www.mediawiki.org/keys/keys.html>
> 
> **********************************************************************
>    1.23.2
> **********************************************************************
> Download:
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz
> 
> Patch to previous version (1.23.1):
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz
> 
> GPG signatures:
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig
> 
> Note:
> There is no i18n patch as there are no changes in translation.
> 
> **********************************************************************
>    1.22.9
> **********************************************************************
> Download:
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz
> 
> Patch to previous version (1.22.8):
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz
> 
> GPG signatures:
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.9.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz.sig
> 
> Note:
> There is no i18n patch as there are no changes in translation.
> 
> **********************************************************************
>    1.19.18
> **********************************************************************
> Download:
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz
> 
> Patch to previous version (1.19.17):
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz
> 
> GPG signatures:
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.18.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz.sig
> https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz.sig
> 
> Note:
> There is no i18n patch as there are no changes in translation.
> 
> 
> Markus Glaser
> (Release Management Team)
> 
> P.S.: If you are interested in shaping the future of MediaWiki, come join our session about a MediaWiki user group at Wikimania: http://wikimania2014.wikimedia.org/wiki/Submissions/How_about_a_MediaWiki_Consortium%3F . Email us at glaser at hallowelt.biz or mah at nichework.com if you would like to participate remotely.
> 
> _______________________________________________
> MediaWiki announcements mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce




More information about the Progsoc mailing list