Hello everyone, I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email. == Security == * (bug 68187) SECURITY: Prepend jsonp callback with comment. * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked. * (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput. == Bugfixes in 1.23.2 == * (bug 68313) Preferences: Turn stubthreshold back into a combo box. * (bug 65214) Fix initSiteStats.php maintenance script. * (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL. == Bugfixes in 1.22.9 == * (bug 59147) The img_metadata field was not being decoded from bytea into text. Full release notes for 1.23.2: <https://www.mediawiki.org/wiki/Release_notes/1.23> Full release notes for 1.22.9: <https://www.mediawiki.org/wiki/Release_notes/1.22> Full release notes for 1.19.18: <https://www.mediawiki.org/wiki/Release_notes/1.19> Public keys: <https://www.mediawiki.org/keys/keys.html> ********************************************************************** 1.23.2 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz Patch to previous version (1.23.1): https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.… https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig Note: There is no i18n patch as there are no changes in translation. ********************************************************************** 1.22.9 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz Patch to previous version (1.22.8): https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.9.tar.gz.… https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz.sig Note: There is no i18n patch as there are no changes in translation. ********************************************************************** 1.19.18 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz Patch to previous version (1.19.17): https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.18.tar.gz… https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz.sig Note: There is no i18n patch as there are no changes in translation. Markus Glaser (Release Management Team) P.S.: If you are interested in shaping the future of MediaWiki, come join our session about a MediaWiki user group at Wikimania: http://wikimania2014.wikimedia.org/wiki/Submissions/How_about_a_MediaWiki_C… . Email us at glaser(a)hallowelt.biz or mah(a)nichework.com if you would like to participate remotely.