[MediaWiki-l] MediaWiki-l Digest, Vol 147, Issue 3

Francis Franck francis.franck at gmail.com
Sat Dec 5 11:24:57 UTC 2015

Dear all

I fully agree with tharpenator at gmail.com
Keeping Mediawiki and its extensions (such as Semanticmediawiki and many
others) up to date isn't an easy job and this is proven by the number of
outdated versions still in use. The task may be made easier by Composer and
other developments, but these are not available to all of us.

Personally I'm trying to stay on track but I'm often struggling with
unexpected problems.

Kind regards


On Fri, Dec 4, 2015 at 10:28 PM, <tharpenator at gmail.com> wrote:

> Hi Alex and All others,
> Doesn't this very issue go to the heart of the Mediawiki survey of
> Stakeholders found? Accordingly to the slideshow on that survey 71% of all
> independent users of Mediawiki use an old outdated version of the software.
> I think we can safely assume almost all of those users have not updated
> their sites with security patches. The problem is the technical knowledge
> to update Mediawiki is above the average user of the software and/or they
> lack command line access. By not having an easy GUI to both update the
> software and the extensions to the software it effectively leads to a lot
> of sites running with the ghost of Christmas past.
> Sent from my iPad
> > On Dec 4, 2015, at 12:29 PM, Alex Monk <krenair at gmail.com> wrote:
> >
> >> On 4 December 2015 at 19:52, Jan Steinman <Jan at ecoreality.org> wrote:
> >>
> >> Having been stung by various upgrades over the years, I tend to not
> touch
> >> stuff that isn't broken. I'm running several MediaWiki sites between
> 1.13
> >> and 1.16. I'd sorta like to upgrade, but I don't know what that buys me,
> >> and y'know, they're all working... :-)
> >>
> >
> > Are you aware of what security issues (which are now public) your wikis
> are
> > vulnerable to? I am very sceptical that stuff "isn't broken", although I
> > (personally) am not going to research old issues, find your wiki, and
> then
> > attack it, to make a point. Have you really backported/rewritten patches
> > for all of them yourself? I've been involved in MediaWiki development
> for a
> > few years now - and 1.16 was obsolete before I started.
> > _______________________________________________
> > MediaWiki-l mailing list
> > To unsubscribe, go to:
> > https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
> _______________________________________________
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

More information about the MediaWiki-l mailing list