-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
MediaWiki 1.3.5 is a security update, which contains a small fix for a potential cross-site scripting vulnerability. All MediaWiki 1.3.x users are strongly encouraged to upgrade to this latest release.
The only substantial change from 1.3.4 is in includes/RawPage.php, so you can copy that one file in to perform a 'hotfix'. (Copy also includes/DefaultSettings.php to update the version number.)
Changes from 1.3.4: * Clean up input validation in 'raw' page output mode which was a potential cross-site scripting opportunity.
Release notes: http://sourceforge.net/project/shownotes.php?release_id=271848
Download: http://prdownloads.sf.net/wikipedia/mediawiki-1.3.5.tar.gz?download
Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system: http://bugzilla.wikipedia.org/
Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)