[IT-SecNots] [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2

[Markus Glaser <glaser AT hallowelt.biz>]

Hello everyone,

I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. 
This is a regular security and maintenance release. Download links are given 
at the end of this email. 

== Security ==
* (bug 68187) SECURITY: Prepend jsonp callback with comment.
* (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used 
for loading a new page in Javascript,instead of relying on the URL in the 
link that has been clicked.
* (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and 
ParserOutput.

== Bugfixes in 1.23.2 ==
* (bug 68313) Preferences: Turn stubthreshold back into a combo box.
* (bug 65214) Fix initSiteStats.php maintenance script.
* (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL.

== Bugfixes in 1.22.9 ==
* (bug 59147) The img_metadata field was not being decoded from bytea into 
text.

Full release notes for 1.23.2:
<https://www.mediawiki.org/wiki/Release_notes/1.23>

Full release notes for 1.22.9:
<https://www.mediawiki.org/wiki/Release_notes/1.22>

Full release notes for 1.19.18:
<https://www.mediawiki.org/wiki/Release_notes/1.19>

Public keys:
<https://www.mediawiki.org/keys/keys.html>

**********************************************************************
    1.23.2
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz

Patch to previous version (1.23.1):
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.22.9
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz

Patch to previous version (1.22.8):
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.9.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.19.18
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz

Patch to previous version (1.19.17):
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.18.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.


Markus Glaser
(Release Management Team)

P.S.: If you are interested in shaping the future of MediaWiki, come join our 
session about a MediaWiki user group at Wikimania: 
http://wikimania2014.wikimedia.org/wiki/Submissions/How_about_a_MediaWiki_Consortium%3F
 . Email us at glaser AT hallowelt.biz or mah AT nichework.com if you would like to 
participate remotely.

_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce