-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
After an annoyingly long series of beta releases, say hello to MediaWiki 1.3.0!
Everyone running the beta releases is _strongly_ recommended to upgrade to the current code.
This release includes a security fix: the 1.3.0 beta releases may be vulnerable to a PHP inclusion attack if include files are exposed and you have allow_url_fopen and register_globals on (this is the default configuration in PHP 4.1.x, but register_globals is off by default in 4.2.x and later).
Note that while MediaWiki through 1.1 required register_globals to be on, 1.2 and 1.3 *do not*. If you have register_globals on, you should turn it off unless you are absolutely sure you require it for some other package. See http://php.net/register_globals for general information.
Release notes: http://sf.net/project/shownotes.php?group_id=34373&release_id=259965
Download: http://prdownloads.sf.net/wikipedia/mediawiki-1.3.0.tar.gz?download
Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system: https://sourceforge.net/tracker/?group_id=34373&atid=411192
Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)