[MediaWiki-announce] MediaWiki security release 1.17.2

Sam Reed reedy at wikimedia.org
Wed Jan 11 21:50:21 UTC 2012


I would like to announce the release of MediaWiki 1.17.2. One security
issue was discovered.

Roan Kattouw discovered an issue with the API, where prop=revisions would
expose
deleted text to unprivileged users through cache pollution.

For more details, see https://bugzilla.wikimedia.org/show_bug.cgi?id=33117

Full release notes:
http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_17_2/phase3/RELEASE-NOT
ES

**********************************************************************
Download:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.tar.gz

Patch to previous version (1.17.1), without interface text:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.patch.gz
Interface text changes:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-i18n-1.17.2.patch.gz

GPG signatures:
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.tar.gz.sig
http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.2.patch.gz.sig
http://download.wikimedia.org/mediawiki/1.17/mediawiki-i18n-1.17.2.patch.gz.
sig

Public keys:
https://secure.wikimedia.org/keys.html




More information about the MediaWiki-announce mailing list