[IT-SecNots] [MediaWiki-announce] MediaWiki maintenance release 1.18.3

["Sam Reed" <reedy AT wikimedia.org>]

I would like to announce the release of MediaWiki 1.18.3. This release
correct issues

from the 1.18.2 security release, and also some other bugs.

 

* (bug 35446) Using "{{nse:}}" with an invalid namespace name no longer
throws

  a PHP warning.

* (bug 35567) The whole password reminder e-mail is now sent in the same
language.

* (bug 35961) Hash comparison should always be strict.

* (bug 35671) PHP Notice: Undefined index: gettoken in
includes/api/ApiMain.php

  on line 598.

* Fix broken email confirmation expiration caused by MWCryptRand changes.

 

Full release notes:

https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob;f=RELEASE-
NOTES-1.18;hb=REL1_18

https://www.mediawiki.org/wiki/Release_notes/1.18

 

 

**********************************************************************

Download:

http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.3.tar.gz

 

Patch to previous version (1.18.2):

http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.3.patch.gz

 

GPG signatures:

http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.3.tar.gz.sig

http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.3.patch.gz.sig

 

Public keys:

https://secure.wikimedia.org/keys.html

_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce