[IT-SecNots] [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.22.5, 1.21.8 and 1.19.14

[Markus Glaser <glaser AT hallowelt.biz>]

Hello everyone,

I am happy  to announce the release of MediaWiki 1.22.5, 1.21.8 and 1.19.14. 
These are regular security and maintenance releases. Download links are given 
at the end of this email.

== Security ==
* (bug 62497) SECURITY: Add CSRF token on Special:ChangePassword.

== Fixes made in all tarballs ==
* (bug 62467) Set a title for the context during import on the cli.

== Bugfixes in 1.22.5 ==
* Fix custom local MediaWiki:Help values.
* mediawiki.js: Fix documentation breakage.
* (bug 58153) Make MySQLi work with non standard port.
* (bug 53887) Reintroduced a link to help pages in the default sidebar, that
  any sysop can customize by editing [[MediaWiki:Sidebar]] locally. The link
  now points to a mediawiki.org page which is guaranteed to exist. Nothing 
needs
  to be done on your end, but remember to adjust [[MediaWiki:Sidebar]] for the
  needs of your wikis. Everyone can help with the shared documentation by
  translating: 
https://www.mediawiki.org/wiki/Special:Translate/agg-Help_pages .
* (bug 53888) Corrected a regression in 1.22 which introduced red links on the
  login page. If you previously installed 1.22.x and have created a local page
  to make the red link blue, write its title as in [[MediaWiki:helplogin-url]]
  if you didn't already. Otherwise, you don't need to do anything, but you can
  translate the help page at https://www.mediawiki.org/wiki/Help:Logging_in .

Full release notes for 1.22.5:
<https://www.mediawiki.org/wiki/Release_notes/1.22>

Full release notes for 1.21.8:
<https://www.mediawiki.org/wiki/Release_notes/1.21>

Full release notes for 1.19.14:
<https://www.mediawiki.org/wiki/Release_notes/1.19>

Public keys:
<https://www.mediawiki.org/keys/keys.html>

**********************************************************************
    1.22.5
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.5.tar.gz

Patch to previous version (1.22.4):
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.5.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.5.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.5.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.5.patch.gz.sig

**********************************************************************
    1.21.8
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.8.tar.gz

Patch to previous version (1.21.7):
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.8.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-core-1.21.8.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.8.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.8.patch.gz.sig

**********************************************************************
    1.19.14
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.14.tar.gz

Patch to previous version (1.19.13):
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.14.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.14.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.14.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.14.patch.gz.sig

Markus Glaser
(Release Management Team)
_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce