[MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.19.16, 1.21.10 and 1.22.7

Hello everyone, I would like to announce the release of MediaWiki 1.19.16, 1.21.10 and 1.22.7. This is a regular security and maintenance release. Download links are given at the end of this email. == Security == * (bug 65501) SECURITY: Don't parse usernames as wikitext on Special:PasswordReset. == Bugfixes in 1.22.7 == * (bug 36356) Add space between two feed links. * (bug 63269) Email notifications were not correctly handling the [[MediaWiki:Helppage]] message being set to a full URL. This is a regression from the 1.22.5 point release, which made the default value for it a URL. If you customized [[MediaWiki:Enotif body]] (the text of email notifications), you'll need to edit it locally to include the URL via the new variable $HELPPAGE instead of the parser functions fullurl and canonicalurl; otherwise you don't have to do anything. * Add missing uploadstash.us_props for PostgreSQL. * (bug 56047) Fixed stream wrapper in PhpHttpRequest. == Bugfixes in 1.21.10 == * (bug 36356) Add space between two feed links. Full release notes for 1.22.7: <https://www.mediawiki.org/wiki/Release_notes/1.22> Full release notes for 1.21.10: <https://www.mediawiki.org/wiki/Release_notes/1.21> Full release notes for 1.19.16: <https://www.mediawiki.org/wiki/Release_notes/1.19> Public keys: <https://www.mediawiki.org/keys/keys.html> ********************************************************************** 1.22.7 ********************************************************************** Download: http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.tar.gz Patch to previous version (1.22.6): http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.patch.gz GPG signatures: http://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.7.tar.gz.s… http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.tar.gz.sig http://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.7.patch.gz.sig ********************************************************************** 1.21.10 ********************************************************************** Download: http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.tar.gz Patch to previous version (1.21.9): http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.patch.gz GPG signatures: http://releases.wikimedia.org/mediawiki/1.21/mediawiki-core-1.21.10.tar.gz.… http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.tar.gz.sig http://releases.wikimedia.org/mediawiki/1.21/mediawiki-1.21.10.patch.gz.sig Note: There is no i18n patch as there are no changes in translation. ********************************************************************** 1.19.16 ********************************************************************** Download: http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.tar.gz Patch to previous version (1.19.15): http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.patch.gz GPG signatures: http://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.16.tar.gz.… http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.tar.gz.sig http://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.16.patch.gz.sig Note: There is no i18n patch as there are no changes in translation. Markus Glaser (Release Team)