[IT-SecNots] [MediaWiki-announce] Security pre-release announcement: 1.35.10 / 1.38.6 / 1.39.3

[Sam Reed <reedy AT wikimedia.org>]

Hi all,

On Thursday we will be issuing a security and maintenance release to all
supported branches of MediaWiki.

The new releases will be:

- 1.35.10
- 1.38.6
- 1.39.3

This will resolve one issue in MediaWiki core, and two issues in bundled
extensions along with bug fixes included for maintenance reasons. This
includes various patches for PHP 8.0, PHP 8.1 and PHP 8.2 support.

We will make the fixes available in the respective release branches (plus
1.40 which is currently in alpha candidate status) and master in git.
Tarballs will be available for the above mentioned point releases as well.

A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow later.

As a reminder, 1.38 is due to become end of life (EOL) in June 2023. 1.38.7
(due in June 2023 on the usual release cadence) is expected to be the last
release for this branch. It is recommended to upgrade to 1.39 (the next LTS
after 1.35).

[1] https://www.mediawiki.org/wiki/Version_lifecycle
_______________________________________________
MediaWiki-announce mailing list -- mediawiki-announce AT lists.wikimedia.org
To unsubscribe send an email to mediawiki-announce-leave AT lists.wikimedia.org