MediaWiki Security and Maintenance Update 1.23.2

[chris]

From the ​MediaWiki-announce list:

I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email.

Security

• (bug 68187) SECURITY: Prepend jsonp callback with comment.
• (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked.
• (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput.

Bugfixes in 1.23.2

• (bug 68313) Preferences: Turn stubthreshold back into a combo box.
• (bug 65214) Fix initSiteStats.php maintenance script.
• (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL.

Full release notes for 1.23.2:
​https://www.mediawiki.org/wiki/Release_notes/1.23

Public keys:
<​https://www.mediawiki.org/keys/keys.html>

1.23.2

Download:
​https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz

Patch to previous version (1.23.1):
​https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz

GPG signatures:
​https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.sig
​https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig
​https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig

Note:
There is no i18n patch as there are no changes in translation.

[chris]

Sorry pasted in the last email not the latest one.

[chris]

Following the MediaWiki#Updates notes:

sudo -i
cd /web/wiki.transitionnetwork.org
export MW="1.23.2"
wget http://releases.wikimedia.org/mediawiki/1.23/mediawiki-$MW.tar.gz -O mediawiki-$MW.tar.gz
wget http://releases.wikimedia.org/mediawiki/1.23/mediawiki-$MW.tar.gz.sig -O mediawiki-$MW.tar.gz.sig
gpg --verify mediawiki-$MW.tar.gz.sig 
tar -zxvf mediawiki-$MW.tar.gz
rsync -av mediawiki-$MW/ www/
chown root:root -R www/
chown -R www-data:www-data www/cache/
chown -R www-data:www-data www/images/
cd www/maintenance/
php update.php 
cd /web/wiki.transitionnetwork.org
rm mediawiki-$MW.tar.gz mediawiki-$MW.tar.gz.sig
rm -rf mediawiki-$MW

Tested the site using the ​https://wiki.transitionnetwork.org/Sandbox page and checked the ​https://wiki.transitionnetwork.org/Special:Version and everything seems fine.