[IT-SecNots] [MediaWiki-announce] Announcing MediaWiki 1.34.0

[Sam Reed <reedy AT wikimedia.org>]

I am happy to announce the availability of the general release of MediaWiki
1.34!

While tarballs have already been uploaded, git tags will follow later on
today.

Thanks to everyone who helped out with this release, especially thanks to
those who tested out the release candidates and provided feedback, as well
as the developers who worked hard to get several important fixes merged in
time for the 1.34 final release. To see what's changed in 1.34, see the
release notes below.

Please note that MediaWiki 1.34 no longer supports HHVM, and also the PHP
version requirement has been raised from 7.0.13 in MediaWiki 1.33, to 7.2.9.

As per the pre-release announcement, 1.34.0 includes some security fixes
that weren't in 1.34.0-rc.0 or 1.34.0-rc.1.

== Security fixes ==
* (T192134) Personal and site-wide CSS and JavaScript is loaded on
Special:PasswordReset.
* (T239466) Possible to circumvent title-blacklist (CVE-2019-19709).

== Links to all mentioned tasks ==
* https://phabricator.wikimedia.org/T192134
* https://phabricator.wikimedia.org/T239466

MediaWiki 1.34 is due to be supported until the end of November 2020.

**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0.tar.gz

Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.0.tar.gz

Patch to previous version (1.34.0-rc.1):
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0.patch.gz

GPG signatures:
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-core-1.34.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.34/mediawiki-1.34.0.patch.gz.sig

Public keys:
https://www.mediawiki.org/keys/keys.html

Release Notes
https://www.mediawiki.org/wiki/Release_notes/1.34
_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce