Hi all,

Tomorrow we will be issuing a security and maintenance release to all supported branches of MediaWiki.

The new releases will be:

- 1.34.2 - 1.33.4 - 1.31.8

This will resolve one minor issue in MediaWiki core, and also includes some fixes previously committed to git, including minor security and hardening patches along with bug fixes included for maintenance reasons.

We've noted that these issues are minor, and as such you don't need to apply them as quickly as with other security releases, if you're unable to do so. We therefore decided to continue with getting the security (and maintenance) release out for this quarter as planned, even with the global situation as is.

We will make the fixes available in these respective release branches, and also master. Tarballs will be available for the above mentioned point releases as well.

A summary of some of the security fixes that have gone into non-bundled MediaWiki extensions will also follow.

As per the MediaWiki Version lifecycle [1], June 2020 is the scheduled EOL date for the REL1_33. 1.33.4 will therefore be the final release of the MediaWiki 1.33 branch, barring any unforeseen issues.

[1] https://www.mediawiki.org/wiki/Version_lifecycle

Thanks!

Sam