-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MediaWiki 1.3.5 is a security update, which contains a small fix for a
potential cross-site scripting vulnerability. All MediaWiki 1.3.x users
are strongly encouraged to upgrade to this latest release.
The only substantial change from 1.3.4 is in includes/RawPage.php, so
you can copy that one file in to perform a 'hotfix'. (Copy also
includes/DefaultSettings.php to update the version number.)
Changes from 1.3.4:
* Clean up input validation in 'raw' page output mode which was a
potential
cross-site scripting opportunity.
Release notes:
http://sourceforge.net/project/shownotes.php?release_id=271848
Download:
http://prdownloads.sf.net/wikipedia/mediawiki-1.3.5.tar.gz?download
Wiki admin help mailing list:
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
Bug report system:
http://bugzilla.wikipedia.org/
Play "stump the developers" live on IRC:
#mediawiki on
irc.freenode.net
- -- brion vibber (brion @
pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
iD8DBQFBXGXdwRnhpk1wk44RAmIwAJ0RupGm+mNo1cZ433k8hHa7J50U2QCgnuG+
SZLnmAK5JuKaHyIaVkxvHbg=
=0PBU
-----END PGP SIGNATURE-----