[IT-SecNots] [MediaWiki-announce] MediaWiki maintenance release 1.17.4

["Sam Reed" <reedy AT wikimedia.org>]

I would like to announce the release of MediaWiki 1.17.4. This release
correct issues
from the 1.17.3 security release, and also some other bugs.

* (bug 35961) Hash comparison should always be strict.
* Fix broken email confirmation expiration caused by MWCryptRand changes.
* (bug 35671) PHP Notice: Undefined index: gettoken in
includes/api/ApiMain.php
  on line 598.

Full release notes:
https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob;f=RELEASE-
NOTES;hb=REL1_17
https://www.mediawiki.org/wiki/Release_notes/1.17


**********************************************************************
Download:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.tar.gz

Patch to previous version (1.17.3):
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.patch.gz

GPG signatures:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.tar.gz.sig
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.patch.gz.sig

Public keys:
https://secure.wikimedia.org/keys.html


_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce