[IT-SecNots] [MediaWiki-announce] MediaWiki security and maintenance release 1.18.1

["Sam Reed" <reedy AT wikimedia.org>]

I would like to announce the release of MediaWiki 1.18.1. One security
issue was discovered.

Roan Kattouw discovered an issue with the API, where prop=revisions would
expose
deleted text to unprivileged users through cache pollution.

For more details, see https://bugzilla.wikimedia.org/show_bug.cgi?id=33117

1.18.1 is also the first maintenance release of the 1.18 series, bringing
numerous bug fixes
to MediaWiki for issues found in the 1.18.0 release.

Full release notes:
http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_18_1/phase3/RELEASE-NOT
ES


**********************************************************************
Download:
http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.1.tar.gz

Patch to previous version (1.18.0), without interface text:
http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.1.patch.gz
Interface text changes:
http://download.wikimedia.org/mediawiki/1.18/mediawiki-i18n-1.18.1.patch.gz

GPG signatures:
http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.1.tar.gz.sig
http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.1.patch.gz.sig
http://download.wikimedia.org/mediawiki/1.18/mediawiki-i18n-1.18.1.patch.gz.
sig

Public keys:
https://secure.wikimedia.org/keys.html


_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to: 
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce