[IT-SecNots] [MediaWiki-announce] Security pre-release announcement: 1.31.11 / 1.35.1

[Sam Reed <reedy AT wikimedia.org>]

Hi all,

Tomorrow we will be issuing a security and maintenance release to all
supported branches of MediaWiki.

The new releases will be:

- 1.31.11
- 1.35.1

This will resolve 5 issues in MediaWiki core (1 of which isn't applicable
to MediaWiki 1.31 at all), and also includes some fixes previously
committed to git, including minor security and hardening patches along with
bug fixes included for maintenance reasons.

We will make the fixes available in these respective release branches, and
also master. Tarballs will be available for the above mentioned point
releases as well.

A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow.

As per the MediaWiki Version lifecycle [1], November 2020 was the scheduled
EOL date for the REL1_34. MediaWiki 1.35.1 will be supported until at least
September 2023, and would be the recommended upgrade path for anyone still
using 1.34.

[1] https://www.mediawiki.org/wiki/Version_lifecycle
_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce