[IT-SecNots] [MediaWiki-announce] MediaWiki security release 1.17.2

["Sam Reed" <reedy AT wikimedia.org>]

I would like to announce the release of MediaWiki 1.17.2. One security
issue was discovered.

Roan Kattouw discovered an issue with the API, where prop=revisions would
expose
deleted text to unprivileged users through cache pollution.

For more details, see https://bugzilla.wikimedia.org/show_bug.cgi?id=33117

Full release notes:
http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_17_2/phase3/RELEASE-NOT
ES

**********************************************************************
Download:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.tar.gz

Patch to previous version (1.17.1), without interface text:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.patch.gz
Interface text changes:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-i18n-1.17.2.patch.gz

GPG signatures:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.tar.gz.sig
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.patch.gz.sig
http://download.wikimedia.org/mediawiki/1.17/mediawiki-i18n-1.17.2.patch.gz.
sig

Public keys:
https://secure.wikimedia.org/keys.html


_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to: 
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce