-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki is now using a "continuous integration" development model with
quarterly snapshot releases. The latest development code is always kept
"ready to run", and in fact runs our own sites on Wikipedia.
Release branches will continue to receive security updates for about a year
from first release, but nonessential bugfixes and feature development happen
will be made on the development trunk and appear in the next quarterly release.
Those wishing to use the latest code instead of a branch release can obtain
it from source control: http://www.mediawiki.org/wiki/Download_from_SVN
=== What's new in 1.6 ===
User interface:
* The account creation form has been separated from the user login form.
* Page protection/unprotection uses a new, expanded form
Templates:
* Categories and "what links here" now update as expected when adding or
removing links in a template.
* Template parameters can now have default values, as {{{name|default value}}}
Uploads:
* Optional support for rasterizing SVG images to PNG for inline dislay
Feeds:
* Feed generation upgraded to Atom 1.0
* Diffs in RSS and Atom feeds are now colored for improved readability.
Database:
* MySQL 3.23.x support dropped; 4.0 or later required
* Experimental support for Unicode mode of MySQL 4.1/5.0 (moderately tested)
* Experimental Oracle support (not well tested!)
Anti-spam extension support:
* Spam blacklist extension now has support for automated cleanup:
http://meta.wikimedia.org/wiki/SpamBlacklist_extension
* Support for a captcha extension to restrict automated spam edits:
http://meta.wikimedia.org/wiki/ConfirmEdit_extension
Numerous bug fixes and other behind-the-scenes changes have been made;
see the file HISTORY for a complete change list.
Full release notes:
http://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_0/phase3/RELEASE-NOTEShttp://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_0/phase3/HISTORY
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.6.0.tar.gz
MD5 checksum:
mediawiki-1.6.0.tar.gz e406c949a5919768b4a5011166e44ea4
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
(Please subscribe to receive announcements of security updates.)
http://mail.wikimedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikimedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEM5/hwRnhpk1wk44RAv4sAJ95Zn+aQ+erOvFmDOofLsSFgOG5GQCfRpTf
mX6swyY5gRn+zgPTiApdl0s=
=UTS5
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.5.7 is a bugfix maintenance release.
Most importantly, a security issue in the installer has been fixed. The bug
affects new installations of 1.5.6 only. If the user specified the MySQL root
password, to allow the installer to create an unprivileged account, the
installer would not only create the new account but also change the root
password to be equal to the password of the new account.
Anyone affected by this bug will need to change the root password back
manually. For information about how to change passwords in MySQL please see:
http://dev.mysql.com/doc/refman/5.1/en/passwords.html
This version includes fixes for compatibility with Internet Explorer 7
beta 2, and various other bugs; see the full changelog at the end of
the release notes.
Release notes:
http://sourceforge.net/project/shownotes.php?release_id=397966
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.7.tar.gz?download
MD5 checksum: 0a2347e2422006d8f75479b06c1963d8
SHA1 checksum: de5421d1c33471627af14aafa2202c60e4b17bac
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFEBs6wwRnhpk1wk44RAgSeAKDK+CSIK1Ar0RqClRJvD9XJFx075QCdEcqh
M6TXQFgV7rw8BHZGjUHfAX4=
=1oRP
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.5.6 and 1.4.14 are security and bugfix maintenance releases.
A bug in edit comment formatting could send PHP into an infinite loop
if certain malformed links were included. In most installations, this
would cause the script to fail after PHP's 30-second failsafe timeout.
in 1.5.6, some improvements have been made to the installer which should make
installation possible on a system with a broken MySQL "root" account. Some
miscellaneous fixes are also present; see the complete change list at the end of
the release notes, linked below.
1.3.x releases are also vulnerable to the loop bug, but we are no longer
maintaining that branch, and it doesn't work with current versions of PHP. Older
installations probably should consider upgrading for the numerous bug fixes etc.
Release notes:
1.5.6: http://sourceforge.net/project/shownotes.php?release_id=386609
1.4.14: http://sourceforge.net/project/shownotes.php?release_id=386608
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.6.tar.gz?downloadhttp://prdownloads.sourceforge.net/wikipedia/mediawiki-1.4.14.tar.gz?downlo…
MD5 checksums:
adcb318d812af2d2637374a8aadc79c1 mediawiki-1.5.6.tar.gz
5cafd5f6adea43be0fedd64883d50127 mediawiki-1.4.14.tar.gz
SHA-1 checksums:
8e0df360ddf5b267dd2b62e59a24c6921ccd1c43 mediawiki-1.5.6.tar.gz
d3e57bb777a3ec8cc07d97ebf6afa850f3f743ab mediawiki-1.4.14.tar.gz
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
(Please subscribe to receive announcements of security updates.)
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com / brion @ wikimedia.org)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFDz1upwRnhpk1wk44RAlYyAJwMUnQad2EQECe4SVhzqiFUnzyiMQCeNnYb
4MBBzK/OwBWHUpn+/PO+qgc=
=+3ip
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.5.4 is a security and bugfix maintenance release.
A hardcoded internal placeholder string has been replaced with a random
one. This closes a hole where security checks in inline style attributes
could be bypassed, injecting JavaScript code that could execute in
Microsoft Internet Explorer.
Other browsers would not be vulnerable.
Several minor fixes are included in this release, most notably a fix
to clear the "you have new messages" flag properly for usernames
containing spaces when e-mail notification is enabled.
See the changelog at the end of the release notes for a full list of
fixes.
Release notes:
http://sourceforge.net/project/shownotes.php?release_id=379951
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.4.tar.gz?download
MD5 checksum:
c5cff706c4d2fc8dd5aabd10f1714be0 mediawiki-1.5.4.tar.gz
SHA-1 checksum:
12ccdbdd295152937595d4a00c41ae156bf19015 mediawiki-1.5.4.tar.gz
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com / brion @ wikimedia.org)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFDqfJ+wRnhpk1wk44RAodbAKCP6RPb2vysJTeUMMMq5eT9EXUkUgCfXzKL
mL8OeBGrSnXpPWteNI42ylI=
=oCrk
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.5.3 is a security and bugfix maintenance release.
Validation of the user language option was broken by a code change in
May 2005, opening the possibility of remote code execution as this
parameter is used in forming a class name dynamically created with
eval().
The validation has been corrected in this version. All prior 1.5 release
and prerelease versions are affected; 1.4 and earlier and not affected.
Additionally several bugs have been fixed; see the changelog in the
release notes for a complete list.
Release notes:
http://sourceforge.net/project/shownotes.php?release_id=375755
Download:
http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.3.tar.gz?download
MD5 checksum:
fc697787f04208d1842a2c646deca626 mediawiki-1.5.3.tar.gz
SHA-1 checksum:
070189e29ace2ef9ab0589db42ecf849f2b88ee5 mediawiki-1.5.3.tar.gz
Before asking for help, try the FAQ:
http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikimedia.org/
Play "stump the developers" live on IRC:
#mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com / brion @ wikimedia.org)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFDktOvwRnhpk1wk44RAi/tAJ9NlfTJTqW+9xTC6xaeOple14hFLQCgpyBn
/hIyYleol9gFbHfMgzJCyy8=
=fdzu
-----END PGP SIGNATURE-----