Hi all,
Tomorrow we will be issuing a security and maintenance release to all
supported branches of MediaWiki. This has been delayed by a week versus the
usual schedule, as making a security last week on 1st April ("April Fools")
was deemed not a great idea.
The new releases will be:
- 1.31.13
- 1.35.2
This will resolve 3 issues in MediaWiki core, 2 issues in bundled
extensions (one of which doesn't apply to REL1_31), and also includes some
fixes previously committed to git, including minor security and hardening
patches along with bug fixes included for maintenance reasons.
We will make the fixes available in these respective release branches, and
also master. Tarballs will be available for the above mentioned point
releases as well.
A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow.
[1] https://www.mediawiki.org/wiki/Version_lifecycle
Hi all,
Tomorrow we will be issuing a security and maintenance release to all
supported branches of MediaWiki.
The new releases will be:
- 1.31.11
- 1.35.1
This will resolve 5 issues in MediaWiki core (1 of which isn't applicable
to MediaWiki 1.31 at all), and also includes some fixes previously
committed to git, including minor security and hardening patches along with
bug fixes included for maintenance reasons.
We will make the fixes available in these respective release branches, and
also master. Tarballs will be available for the above mentioned point
releases as well.
A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow.
As per the MediaWiki Version lifecycle [1], November 2020 was the scheduled
EOL date for the REL1_34. MediaWiki 1.35.1 will be supported until at least
September 2023, and would be the recommended upgrade path for anyone still
using 1.34.
[1] https://www.mediawiki.org/wiki/Version_lifecycle
As per the MediaWiki version lifecycle,[1] I would like to announce the
formal end of life (EOL) of MediaWiki 1.34 as of today, Monday November 30,
2020.
This means that MediaWiki 1.34 will no longer receive maintenance or
security backports. It is therefore strongly discouraged that you continue
to use it.
It is recommended to upgrade to MediaWiki 1.35, the current Long Term
Support (LTS) version which is not due to become EOL until September 2023.
The legacy Long Term Support version of MediaWiki, MediaWiki 1.31, is older
and downgrading is not supported.
MediaWiki 1.35 bumps the required PHP version from 7.2.9 in 1.34 (which is
unsupported upstream), to PHP 7.3.19 or later.
Thanks!
Sam Reed
[1] https://www.mediawiki.org/wiki/Version_lifecycle