[IT-SecNots] [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.16, 1.21.10 and 1.22.7

[Markus Glaser <glaser AT hallowelt.biz>]

Hello everyone,

I would like to announce the release of MediaWiki 1.19.16, 1.21.10 and 
1.22.7. This is a regular security and maintenance release. Download links 
are given at the end of this email. 

== Security ==
* (bug 65501) SECURITY: Don't parse usernames as wikitext on
  Special:PasswordReset.

== Bugfixes in 1.22.7 ==
* (bug 36356) Add space between two feed links.
* (bug 63269) Email notifications were not correctly handling the
  [[MediaWiki:Helppage]] message being set to a full URL. This is a regression
  from the 1.22.5 point release, which made the default value for it a URL.
  If you customized [[MediaWiki:Enotif body]] (the text of email 
notifications),
  you'll need to edit it locally to include the URL via the new variable
  $HELPPAGE instead of the parser functions fullurl and canonicalurl; 
otherwise
  you don't have to do anything.
* Add missing uploadstash.us_props for PostgreSQL.
* (bug 56047) Fixed stream wrapper in PhpHttpRequest.

== Bugfixes in 1.21.10 ==
* (bug 36356) Add space between two feed links.

Full release notes for 1.22.7:
<https://www.mediawiki.org/wiki/Release_notes/1.22>

Full release notes for 1.21.10:
<https://www.mediawiki.org/wiki/Release_notes/1.21>

Full release notes for 1.19.16:
<https://www.mediawiki.org/wiki/Release_notes/1.19>

Public keys:
<https://www.mediawiki.org/keys/keys.html>

**********************************************************************
    1.22.7
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.tar.gz

Patch to previous version (1.22.6):
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.7.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.patch.gz.sig

**********************************************************************
    1.21.10
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.tar.gz

Patch to previous version (1.21.9):
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-core-1.21.10.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.19.16
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.tar.gz

Patch to previous version (1.19.15):
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.16.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.


Markus Glaser
(Release Team)

_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce