it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Sam Reed <reedy AT wikimedia.org>
- To: mediawiki-announce AT lists.wikimedia.org, MediaWiki announcements and site admin list <mediawiki-l AT lists.wikimedia.org>, wikitech-l AT lists.wikimedia.org
- Subject: [IT-SecNots] [MediaWiki-announce] Maintenance release: MediaWiki 1.37.4
- Date: Fri, 8 Jul 2022 18:33:55 +0100
- Archived-at: <https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce AT lists.wikimedia.org/message/XYTM32WFJSLBE2FTFEZPH2C7H6VUOEGY/>
- Authentication-results: mail.piratenpartei.de; dkim=pass header.d=lists.wikimedia.org header.s=wikimedia header.b=FhjqDuOf; dmarc=pass (policy=none) header.from=wikimedia.org; spf=pass (mail.piratenpartei.de: domain of mediawiki-announce-bounces AT lists.wikimedia.org designates 2620:0:861:1:208:80:154:21 as permitted sender) smtp.mailfrom=mediawiki-announce-bounces AT lists.wikimedia.org
- List-archive: <https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce AT lists.wikimedia.org/>
- List-id: MediaWiki update and security announcements list <mediawiki-announce.lists.wikimedia.org>
I would like to announce the availability of MediaWiki 1.37.4.
This primarily fixes an issue identified in the MediaWiki 1.37.3 release.
The incorrect version of guzzlehttp/guzzle was included in the tarball (and
git repo) vendor, meaning that update.php would not run successfully.
It also includes some minor backported fixes for PHP 8.1 support, which
would reduce log spam when logging was enabled. These fixes will be
included in later point releases for 1.35 and 1.38.
=== Changes since MediaWiki 1.37.3 ===
* Localisation updates.
* (T311568) UploadBase::setTempFile() handle $tempPath being passed as null.
* (T311559) SpecialListFiles: user parameter isn't always present.
* (T311561) ImageListPager: Don't call htmlspecialchars() on null.
* (T311920) SpecialBlockList: Prevent passing null to trim().
* (T311921) SpecialUserrights: Don't pass null to str_replace.
* (T311570) SpecialWithoutInterwiki: Don't pass null through to
Title::capitalize().
* (T311574, T311576) SpecialLinkSearch: Don't pass null through to the
parser.
* (T312059) Update guzzlehttp/guzzle to 7.4.5 in vendor.
* (T296435, T297669) cache: Add four fields to LinkCache::getSelectFields.
**********************************************************************
Download:
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.tar.gz
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.zip
Download without bundled extensions:
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-core-1.37.4.tar.gz
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-core-1.37.4.zip
Patch to previous version (1.37.3):
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.patch.gz
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.patch.zip
GPG signatures:
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-core-1.37.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-core-1.37.4.zip.sig
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.tar.gz.sig
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.zip.sig
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.patch.gz.sig
https://releases.wikimedia.org/mediawiki/1.37/mediawiki-1.37.4.patch.zip.sig
Public keys:
https://www.mediawiki.org/keys/keys.html
_______________________________________________
MediaWiki-announce mailing list -- mediawiki-announce AT lists.wikimedia.org
To unsubscribe send an email to mediawiki-announce-leave AT lists.wikimedia.org
- [IT-SecNots] [MediaWiki-announce] Maintenance release: MediaWiki 1.37.4, Sam Reed, 08.07.2022
Archiv bereitgestellt durch MHonArc 2.6.24.