-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.5.6 and 1.4.14 are security and bugfix maintenance releases.
A bug in edit comment formatting could send PHP into an infinite loop
if certain malformed links were included. In most installations, this
would cause the script to fail after PHP's 30-second failsafe timeout.
in 1.5.6, some improvements have been made to the installer which should make
installation possible on a system with a broken MySQL "root" account. Some
miscellaneous fixes are also present; see the complete change list at the end of
the release notes, linked below.
1.3.x releases are also vulnerable to the loop bug, but we are no longer
maintaining that branch, and it doesn't work with current versions of PHP. Older
installations probably should consider upgrading for the numerous bug fixes etc.
Release notes:
1.5.6: http://sourceforge.net/project/shownotes.php?release_id=386609
1.4.14: http://sourceforge.net/project/shownotes.php?release_id=386608
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.6.tar.gz?downloadhttp://prdownloads.sourceforge.net/wikipedia/mediawiki-1.4.14.tar.gz?downlo…
MD5 checksums:
adcb318d812af2d2637374a8aadc79c1 mediawiki-1.5.6.tar.gz
5cafd5f6adea43be0fedd64883d50127 mediawiki-1.4.14.tar.gz
SHA-1 checksums:
8e0df360ddf5b267dd2b62e59a24c6921ccd1c43 mediawiki-1.5.6.tar.gz
d3e57bb777a3ec8cc07d97ebf6afa850f3f743ab mediawiki-1.4.14.tar.gz
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
(Please subscribe to receive announcements of security updates.)
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com / brion @ wikimedia.org)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFDz1upwRnhpk1wk44RAlYyAJwMUnQad2EQECe4SVhzqiFUnzyiMQCeNnYb
4MBBzK/OwBWHUpn+/PO+qgc=
=+3ip
-----END PGP SIGNATURE-----