-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
MediaWiki 1.5 alpha 2 includes a lot of bug fixes, feature merges, and a security update.
THIS IS AN EXPERIMENTAL RELEASE FOR TESTING ONLY. Public or in-production servers should use the stable MediaWiki 1.4.5 release.
Incorrect handling of page template inclusions made it possible to inject JavaScript code into HTML attributes, which could lead to cross-site scripting attacks on a publicly editable wiki.
Vulnerable releases and fix: * 1.5 prerelease: fixed in 1.5alpha2 * 1.4 stable series: fixed in 1.4.5 * 1.3 legacy series: fixed in 1.3.13 * 1.2 series no longer supported; upgrade to 1.4.5 strongly recommended
For a relatively full list of changes since 1.5alpha1, see the changelog in the release notes.
Release notes: http://sourceforge.net/project/shownotes.php?release_id=332229
Download: http://prdownloads.sf.net/wikipedia/mediawiki-1.5alpha2.tar.gz?download
Before asking for help, try the FAQ: http://meta.wikimedia.org/wiki/MediaWiki_FAQ
Low-traffic release announcements mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system: http://bugzilla.wikipedia.org/
Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net
- -- brion vibber (brion @ pobox.com)