Hello everyone,

I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email.

== Security == * (bug 68187) SECURITY: Prepend jsonp callback with comment. * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked. * (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput.

== Bugfixes in 1.23.2 == * (bug 68313) Preferences: Turn stubthreshold back into a combo box. * (bug 65214) Fix initSiteStats.php maintenance script. * (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL.

== Bugfixes in 1.22.9 == * (bug 59147) The img_metadata field was not being decoded from bytea into text.

Full release notes for 1.23.2: https://www.mediawiki.org/wiki/Release_notes/1.23

Full release notes for 1.22.9: https://www.mediawiki.org/wiki/Release_notes/1.22

Full release notes for 1.19.18: https://www.mediawiki.org/wiki/Release_notes/1.19

Public keys: https://www.mediawiki.org/keys/keys.html

********************************************************************** 1.23.2 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz

Patch to previous version (1.23.1): https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz

GPG signatures: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.s... https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig

Note: There is no i18n patch as there are no changes in translation.

********************************************************************** 1.22.9 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz

Patch to previous version (1.22.8): https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz

GPG signatures: https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.9.tar.gz.s... https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.9.patch.gz.sig

Note: There is no i18n patch as there are no changes in translation.

********************************************************************** 1.19.18 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz

Patch to previous version (1.19.17): https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz

GPG signatures: https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.18.tar.gz.... https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.18.patch.gz.sig

Note: There is no i18n patch as there are no changes in translation.

Markus Glaser (Release Management Team)

P.S.: If you are interested in shaping the future of MediaWiki, come join our session about a MediaWiki user group at Wikimania: http://wikimania2014.wikimedia.org/wiki/Submissions/How_about_a_MediaWiki_Co... . Email us at glaser@hallowelt.biz or mah@nichework.com if you would like to participate remotely.