[IT-SecNots] [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.17, 1.21.11, 1.22.8 and 1.23.1

[Markus Glaser <glaser AT hallowelt.biz>]

Hello everyone,

I would like to announce the release of MediaWiki 1.19.17, 1.21.11, 1.22.8 
and 1.23.1. This is a regular security and maintenance release. Download 
links are given at the end of this email. 

== Security ==
* (bug 65839) SECURITY: Prevent external resources in SVG files.

== Bugfixes in 1.23.1 ==

* (bug 67025) Special:Watchlist: Don't try to render empty row
* (bug 66922) Don't allow some E_NOTICE messages to end up in the 
LocalSettings.php.
* (bug 66467) Filebackend: Avoid using popen() when "parallelize" is disabled
* (bug 66428) MimeMagic: Don't seek before BOF. This has weird side effects 
like only extracting the tail of the file partially or not at all.
* (bug 66182) Removed -x flag on some php files.
        
== Bugfixes in 1.22.8 ==
* (bug 66428) MimeMagic: Don't seek before BOF. This has weird side effects 
like only extracting the tail of the file partially or not at all.

== Bugfixes in 1.21.11 ==
* (bug 66428) MimeMagic: Don't seek before BOF. This has weird side effects 
like only extracting the tail of the file partially or not at all.

== Bugfixes in 1.19.17 ==
* (bug 66428) MimeMagic: Don't seek before BOF. This has weird side effects 
like only extracting the tail of the file partially or not at all.

Full release notes for 1.23.1:
<https://www.mediawiki.org/wiki/Release_notes/1.23>

Full release notes for 1.22.8:
<https://www.mediawiki.org/wiki/Release_notes/1.22>

Full release notes for 1.21.11:
<https://www.mediawiki.org/wiki/Release_notes/1.21>

Full release notes for 1.19.17:
<https://www.mediawiki.org/wiki/Release_notes/1.19>

Public keys:
<https://www.mediawiki.org/keys/keys.html>

**********************************************************************
    1.23.1
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.tar.gz

Patch to previous version (1.23.0):
http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.1.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.22.8
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.8.tar.gz

Patch to previous version (1.22.7):
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.8.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.8.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.8.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.8.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.21.11
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.11.tar.gz

Patch to previous version (1.21.10):
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.11.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-core-1.21.11.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.11.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.11.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.19.17
**********************************************************************
Download:
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.17.tar.gz

Patch to previous version (1.19.16):
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.17.patch.gz

GPG signatures:
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.17.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.17.tar.gz.sig
http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.17.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.


Markus Glaser
(Release Team)

_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce