[IT-SecNots] [MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.19, 1.22.11 and 1.23.4

[Markus Glaser <glaser AT hallowelt.biz>]

Hello everyone,

I would like to announce the release of MediaWiki 1.19.19, 1.22.11 and 
1.23.4. This is a regular security and maintenance release. Download links 
are given at the end of this email. 

== Security ==
* (bug 69008) SECURITY: Enhance CSS filtering in SVG files. Filter <style> 
elements; normalize style elements and attributes before filtering; add 
checks for attributes that contain css; add unit tests for html5sec and 
reported bugs.

== Bugfixes in 1.23.4 ==
* (bug 65998) Make MySQLi work with non-standard socket.
* (bug 66986) GlobalVarConfig shouldn't throw exceptions for null-valued 
config settings.

Full release notes for 1.23.4:
<https://www.mediawiki.org/wiki/Release_notes/1.23>

Full release notes for 1.22.11:
<https://www.mediawiki.org/wiki/Release_notes/1.22>

Full release notes for 1.19.19:
<https://www.mediawiki.org/wiki/Release_notes/1.19>

Public keys:
<https://www.mediawiki.org/keys/keys.html>

**********************************************************************
    1.23.4
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.4.tar.gz

Patch to previous version (1.23.3):
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.4.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.4.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

**********************************************************************
    1.22.11
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.11.tar.gz

Patch to previous version (1.22.10):
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.11.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.11.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.11.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.11.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.


**********************************************************************
    1.19.19
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.19.tar.gz

Patch to previous version (1.19.18):
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.19.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.19.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.19.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.19.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

Markus Glaser
(Wiki Release Team)

_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce