*(apologies for cross-posting)*

Hello,

We’re pleased to announce security and maintenance updates for Wikibase Suite that are compatible with MediaWiki 1.35 and 1.36. These updates, which include the release of new container images, take the form of two new Suite versions: wmde.7 and wmde.8, respectively.

Release wmde.7 includes two security fixes for issues in the Wikibase extension:

-

Validate term length in Special:NewProperty (phab:T308659 https://phabricator.wikimedia.org/T308659) -

Escape message in hook handler (phab:T302215) https://phabricator.wikimedia.org/T302215

Note that wmde.8 release is based on Mediawiki version 1.36 which is no longer maintained. We provide this update for technical reasons, as updating to the most recent 1.36-compatible Wikibase version will be needed to update Wikibase to Mediawiki 1.37. WMDE will be releasing that new version shortly. The wmde.8 release includes a fix for the “Escape message in hook handler” issue (phab:T302215 https://phabricator.wikimedia.org/T302215).

Both releases also include minor updates, such as translation updates for MediaWiki and the Wikibase and WikibaseLocalMedia extensions, as well as the Query Service UI and Quick Statements.

For update instructions, see Upgrading Wikibase https://github.com/wmde/wikibase-release-pipeline/blob/main/docs/topics/upgrading.md .

If you have any questions, please feel free to ask on this mailing list, or you can leave a comment at Talk:Wikibase/FAQ https://www.mediawiki.org/wiki/Talk:Wikibase/FAQ.

Cheers,