I would like to announce the release of MediaWiki 1.17.4. This release correct issues from the 1.17.3 security release, and also some other bugs.

* (bug 35961) Hash comparison should always be strict. * Fix broken email confirmation expiration caused by MWCryptRand changes. * (bug 35671) PHP Notice: Undefined index: gettoken in includes/api/ApiMain.php on line 598.

Full release notes: https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob;f=RELEASE- NOTES;hb=REL1_17 https://www.mediawiki.org/wiki/Release_notes/1.17

********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.tar.gz

Patch to previous version (1.17.3): http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.patch.gz

GPG signatures: http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.tar.gz.sig http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.4.patch.gz.sig

Public keys: https://secure.wikimedia.org/keys.html