October 2005 - MediaWiki-announce - lists.wikimedia.org

MediaWiki-announce October 2005

mediawiki-announce@lists.wikimedia.org

1 participants
3 discussions

by Brion Vibber

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MediaWiki 1.5.1 is a bugfix and security maintenance release, and is a recommended upgrade for all installations. This release includes further corrections to the inline CSS style sanitation which works around a JavaScript "feature" on Microsoft Internet Explorer. Users of Microsoft Internet Explorer for Windows may be vulnerable to XSS injections on prior versions; users of standards-compliant browsers are not vulnerable. Major fixes include: * Image pages work again with resizing disabled * Works in MySQL 5.0 strict mode There is experimental support in this release for explicitly declaring the UTF-8 charset in the database; this has been tested with MySQL 5.0.15 but should work on 4.1 as well. IMPORTANT: Changing this setting on an existing wiki may produce interesting data corruption, depending on server configuration. Page contents should, usually, be unaffected, but page titles and other items may be. Limitations in MySQL's Unicode support mean that characters outside the BMP cannot be used in page titles or various other fields when using this mode. Table definitions are in maintenance/mysql5/tables.sql, and the runtime option to send 'SET NAMES utf8' is set by $wgDBmysql5 = true. (MySQL 3.23.x and 4.0.x do not support character set declarations; on these versions MediaWiki simply works with UTF-8 data and MySQL is blissfully unaware of it.) Release notes: http://sourceforge.net/project/shownotes.php?release_id=366110 Download: http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.1.tar.gz?download MD5 checksum: f2030d3302a899f4e4f2e6d9f3842067 SHA-1 checksum: ff4c843f132ca54ef85b2a15fb42498a54f0ae33 Before asking for help, try the FAQ: http://meta.wikimedia.org/wiki/MediaWiki_FAQ Low-traffic release announcements mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l Bug report system: http://bugzilla.wikimedia.org/ Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net - -- brion vibber (brion @ pobox.com ) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDX2C5wRnhpk1wk44RAjcFAKCreSnX6H9AlrTJPYAqW9cOcejTQgCgoqk3 k+lb4bVzuxytsf1Xvgv8z3E= =flUz -----END PGP SIGNATURE-----

18?years, 7?months

MediaWiki 1.5.0 released

by Brion Vibber

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MediaWiki 1.5.0 is the new stable release branch of MediaWiki, and is recommended for all new installations. See the release notes (link below) for details of new features and requirements. Any wikis running a 1.5 beta or release candidate are strongly recommended to upgrade to the final release, which includes a number of bug fixes and a security fix for CSS bugs in Microsoft Internet Explorer. IMPORTANT: Running a 1.3 or 1.4 wiki and don't want to jump to 1.5 yet? Be sure to upgrade to 1.3.17 or 1.4.11, also released today. Versions prior to 1.3.16 and 1.4.10 have a serious data corruption bug which is triggered by a spambot known to operate in the wild. Release notes: http://sourceforge.net/project/shownotes.php?release_id=361506 Download: http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.0.tar.gz?download MD5 checksum: b431e82ee5fd0d619d17cb2d417387c3 mediawiki-1.5.0.tar.gz Before asking for help, try the FAQ: http://meta.wikimedia.org/wiki/MediaWiki_FAQ Low-traffic release announcements mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l Bug report system: http://bugzilla.wikimedia.org/ Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net - -- brion vibber (brion @ pobox.com / brion @ wikimedia.org ) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDRKyrwRnhpk1wk44RAjBhAKCwMKBNBviPZL/8h5/qgAm1WPKJUgCfcbBj aTFHYRsaDB04lX5zs9R9CGI= =M4I7 -----END PGP SIGNATURE-----

18?years, 7?months

MediaWiki 1.4.11, 1.3.17 security updates

by Brion Vibber

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MediaWiki 1.4.11 and 1.3.17 are a security maintenance releases. Unsafe handling of CSS by Microsoft Internet Explorer could be exploited to produce cross-site scripting attacks by JavaScript injection to clients running that browser. This release blacklists several additional variants from use in HTML inline style attributes. All publicly accessible wikis are recommended to upgrade to reduce the risk to visitors using Microsoft web browsers. Note: the MediaWiki 1.4.x and 1.3.x series are not compatible with PHP 5.0.5 or higher. Upgrade to the 1.5.0 release if you require this version of PHP 5. Release notes: http://sourceforge.net/project/shownotes.php?release_id=361505 1.4.11 http://sourceforge.net/project/shownotes.php?release_id=361504 1.3.17 Download: http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.4.11.tar.gz?downlo… http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.3.17.tar.gz?downlo… MD5 checksums: 023e296dea4274af190f286064e1be27 mediawiki-1.4.11.tar.gz d2fe05847162501f2aa7b8cb65114f69 mediawiki-1.3.17.tar.gz Before asking for help, try the FAQ: http://meta.wikimedia.org/wiki/MediaWiki_FAQ Low-traffic release announcements mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l Bug report system: http://bugzilla.wikimedia.org/ Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net - -- brion vibber (brion @ pobox.com / brion @ wikimedia.org ) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDRKyKwRnhpk1wk44RApYRAKCqXGkzbd1fHiX0+xgzxkH031mSbACfYIui e5Vv1p3+XKOzu1MhjjF4lWA= =1j+t -----END PGP SIGNATURE-----

18?years, 7?months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

MediaWiki-announce October 2005