2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

December

List overview
Download

MediaWiki-announce February 2009

mediawiki-announce@lists.wikimedia.org

1 participants
2 discussions

Start a nNew thread

MediaWiki 1.14.0 and 1.13.5 released
by Tim Starling 22 Feb '09

22 Feb '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We are proud to announce the first stable release of the 2009 Q1 branch of MediaWiki, version 1.14.0. We are also releasing MediaWiki 1.13.5. This is a maintenance release which corrects some bugs in the installer, introduced during the hasty security release of 1.13.4. It is not necessary to upgrade if you do not intend on using the installer. Thanks to our localisation community at translatewiki.net, MediaWiki 1.14.0 now has 311,000 localised interface text fragments spread across 298 languages, that's 17% more than in 1.13.0. MediaWiki is now using a "continuous integration" development model with quarterly snapshot releases. The latest development code is always kept "ready to run", and in fact runs our own sites on Wikipedia. Release branches will continue to receive security updates for about a year from first release, but nonessential bugfixes and feature developments will be made on the development trunk and appear in the next quarterly release. Those wishing to use the latest code instead of a branch release can obtain it from source control: <http://www.mediawiki.org/wiki/Download_from_SVN> Upgrade FAQ: http://www.mediawiki.org/wiki/Manual:FAQ#Upgrading Full release notes: <http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_14_0/phase3/RELEASE-NO…> <http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_5/phase3/RELEASE-NO…> ********************************************************************** MEDIAWIKI 1.14.0 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.0.tar.gz Patch to previous version (1.14.0rc1), without interface text: http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.0.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.14/mediawiki-i18n-1.14.0.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.0.tar.gz.sig http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.0.patch.gz.sig http://download.wikimedia.org/mediawiki/1.14/mediawiki-i18n-1.14.0.patch.gz… Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** MEDIAWIKI 1.13.5 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.5.tar.gz Patch to previous version (1.13.4), without interface text: http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.5.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.13/mediawiki-i18n-1.13.5.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.5.tar.gz.sig http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.5.patch.gz.sig http://download.wikimedia.org/mediawiki/1.13/mediawiki-i18n-1.13.5.patch.gz… Public keys: https://secure.wikimedia.org/keys.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkmhN3EACgkQ8F4kYQ4+MpMbYQCgmf6RwCUEo9RRw3hfzNz15B+a MT0An1BqeA6wUOQnIFZJ4mRBjJJw37Gc =ac1p -----END PGP SIGNATURE-----

1 0

MediaWiki releases: security update and new major branch
by Tim Starling 07 Feb '09

07 Feb '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is a security release of 1.13.4, 1.12.4 and 1.6.12. A number of cross-site scripting (XSS) security vulnerabilities were discovered in the web-based installer (config/index.php). These vulnerabilities all require a live installer -- once the installer has been used to install a wiki, it is deactivated. Note that cross-site scripting vulnerabilities can be used to attack any website in the same cookie domain. So if you have an uninstalled copy of MediaWiki on the same site as an active web service, MediaWiki could be used to attack the active service. If you are hosting an old copy of MediaWiki that you have never installed, we advise you to remove it from the web. Additionally, we are releasing 1.14.0rc1, the first release candidate of the 2009 Q1 branch. Brave souls are encouraged to download it and try it out. Note that we have disabled SQLite installation in 1.14, due to the incompleteness of the implementation. We intend to restore it in 1.15. We're not sure how many people are using SQLite, so contact us if our treatment of it is causing you problems. Upgrade FAQ: http://www.mediawiki.org/wiki/Manual:FAQ#Upgrading Full release notes: http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_14_0RC1/phase3/RELEASE… http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NO… http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NO… http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NO… ********************************************************************** MEDIAWIKI 1.14.0rc1 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.0rc1.tar.gz Patch generation failed due to changes in binary files. GPG signature: http://download.wikimedia.org/mediawiki/1.14/mediawiki-1.14.0rc1.tar.gz.sig Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** MEDIAWIKI 1.13.4 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.4.tar.gz Patch to previous version (1.13.3), without interface text: http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.4.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.13/mediawiki-i18n-1.13.4.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.4.tar.gz.sig http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.4.patch.gz.sig http://download.wikimedia.org/mediawiki/1.13/mediawiki-i18n-1.13.4.patch.gz… Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** MEDIAWIKI 1.12.4 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.12/mediawiki-1.12.4.tar.gz Patch to previous version (1.12.3), without interface text: http://download.wikimedia.org/mediawiki/1.12/mediawiki-1.12.4.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.12/mediawiki-i18n-1.12.4.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.12/mediawiki-1.12.4.tar.gz.sig http://download.wikimedia.org/mediawiki/1.12/mediawiki-1.12.4.patch.gz.sig http://download.wikimedia.org/mediawiki/1.12/mediawiki-i18n-1.12.4.patch.gz… Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** MEDIAWIKI 1.6.12 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.6/mediawiki-1.6.12.tar.gz Patch to previous version (1.6.11): http://download.wikimedia.org/mediawiki/1.6/mediawiki-1.6.12.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.6/mediawiki-1.6.12.tar.gz.sig http://download.wikimedia.org/mediawiki/1.6/mediawiki-1.6.12.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html - -- Tim Starling -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkmND2sACgkQ8F4kYQ4+MpObjgCfX5osxcDT2MDfU+6PF73UXO1N l1sAnioY8dzMqDII8JuFZ6SWK3tMcHZu =SxDh -----END PGP SIGNATURE-----

1 0