MediaWiki-announce May 2013

mediawiki-announce@lists.wikimedia.org

1 participants
2 discussions

MediaWiki Security Release: 1.20.6 and 1.19.7
by Chris Steipp 21 May '13

21 May '13

I would like to announce the release of MediaWiki 1.20.6 and 1.19.7. These releases fix a security related issue that could affect users of MediaWiki. Download links are given at the end of this email. * MediaWiki user Marco discovered that security checks for file uploads were not being run when the file was uploaded in chunks through the API. This option has been available to users who can upload files since MediaWiki 1.19. <https://bugzilla.wikimedia.org/show_bug.cgi?id=48306> Full release notes for 1.20.6: <https://www.mediawiki.org/wiki/Release_notes/1.20> Full release notes for 1.19.7: <https://www.mediawiki.org/wiki/Release_notes/1.19> For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** 1.20.6 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.6.tar.gz Patch to previous version (1.20.5): http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.6.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.6.tar.gz.sig http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.6.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** 1.19.7 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.7.tar.gz Patch to previous version (1.19.6): http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.7.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.7.tar.gz.sig http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.7.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html

1 0

Pre-Release Announcement for MediaWiki 1.19.7 and 1.20.6
by Chris Steipp 20 May '13

20 May '13

This is a notice that on Tuesday, May 21st between 20:00-21:00 UTC (1-2pm PDT) Wikimedia Foundation will release security updates for current and supported branches of the MediaWiki software. Downloads and patches will be available at that time, with the git repositories updated later that afternoon. Although MediaWiki does not have the vulnerable feature enabled by default, most wiki using common advanced features will want to patch for this issue.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

MediaWiki-announce May 2013