[IT-SecNots] [MediaWiki-announce] Security release 1.27.3 and 1.28.2

[Chad Horohoe <chorohoe AT wikimedia.org>]

Hello!

I would like to announce the immediate availability of security releases
1.27.3
and 1.28.2. Due to a mistake in packaging, the releases 1.27.2 and 1.28.1
did
not contain the fix for SyntaxHighlight_GeSHi. This new release does contain
that fix.

The task in question: https://phabricator.wikimedia.org/T158689

If you are not running this extension, you do not necessarily need to
upgrade.

Thanks, and I apologize for any confusion in the matter.

Full release notes:
https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_27/RELEASE-NOTES-1.27
https://www.mediawiki.org/wiki/Release_notes/1.27

https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_28/RELEASE-NOTES-1.28
https://www.mediawiki.org/wiki/Release_notes/1.28

**********************************************************************
1.27.3
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.3.tar.gz

Core only, no extensions:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.3.tar.gz.sig

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-1.27.3.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.27/mediawiki-core-1.27.3.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

**********************************************************************
1.28.2
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.2.tar.gz

Core only, no extensions:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.2.tar.gz.sig

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-1.28.2.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.28/mediawiki-core-1.28.2.tar.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html
_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce