[IT-SecNots] [MediaWiki-announce] Security pre-release announcement: 1.43.10 / 1.45.5 / 1.46.1

[Sam Reed via MediaWiki-announce <mediawiki-announce AT lists.wikimedia.org>]

Hi all,

Tomorrow (October 1st) we will be issuing a security and maintenance
release to all supported branches of MediaWiki.

The new releases will be:

- 1.43.10
- 1.45.5
- 1.46.1

This will also resolve security issues in bundled extensions, along with
bug fixes included for maintenance reasons.

These security issues also affect many unsupported versions of MediaWiki.

We will make the fixes available in the respective release branches and
master in git. Tarballs will be available for the above mentioned point
releases as well.

A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow later.

As a reminder, MediaWiki 1.39 became EOL in December 2025, MediaWiki 1.42
became EOL in June 2025 and MediaWiki 1.44 became EOL at the end of July
2026.

More information on these timelines can be viewed on the version lifecycle
page at [1].

Thank you,

Wikimedia Foundation, Product Safety and Integrity
security-help AT wikimedia.org

[1] https://www.mediawiki.org/wiki/Version_lifecycle
_______________________________________________
MediaWiki-announce mailing list -- mediawiki-announce AT lists.wikimedia.org
To unsubscribe send an email to mediawiki-announce-leave AT lists.wikimedia.org