Ticket #766 (closed maintenance: fixed)

Opened 2 years ago

Last modified 2 years ago

MediaWiki Security and Maintenance Update 1.23.2

Reported by: chris Owned by: chris
Priority: major Milestone: Maintenance
Component: Mediawiki Keywords:
Cc: ed Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 0.35

Description (last modified by chris) (diff)

From the MediaWiki-announce list:

I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email.


  • (bug 68187) SECURITY: Prepend jsonp callback with comment.
  • (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked.
  • (bug 65778) SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput.

Bugfixes in 1.23.2

  • (bug 68313) Preferences: Turn stubthreshold back into a combo box.
  • (bug 65214) Fix initSiteStats.php maintenance script.
  • (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL.

Full release notes for 1.23.2:

Public keys:



Patch to previous version (1.23.1):

GPG signatures:

There is no i18n patch as there are no changes in translation.

Change History

comment:1 Changed 2 years ago by chris

  • Description modified (diff)
  • Summary changed from MediaWiki Security and Maintenance Update 1.23.1 to MediaWiki Security and Maintenance Update 1.23.2

Sorry pasted in the last email not the latest one.

Last edited 2 years ago by chris (previous) (diff)

comment:2 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.35
  • Status changed from new to closed
  • Resolution set to fixed
  • Total Hours changed from 0.0 to 0.35

Following the MediaWiki#Updates notes:

sudo -i
cd /web/wiki.transitionnetwork.org
export MW="1.23.2"
wget http://releases.wikimedia.org/mediawiki/1.23/mediawiki-$MW.tar.gz -O mediawiki-$MW.tar.gz
wget http://releases.wikimedia.org/mediawiki/1.23/mediawiki-$MW.tar.gz.sig -O mediawiki-$MW.tar.gz.sig
gpg --verify mediawiki-$MW.tar.gz.sig 
tar -zxvf mediawiki-$MW.tar.gz
rsync -av mediawiki-$MW/ www/
chown root:root -R www/
chown -R www-data:www-data www/cache/
chown -R www-data:www-data www/images/
cd www/maintenance/
php update.php 
cd /web/wiki.transitionnetwork.org
rm mediawiki-$MW.tar.gz mediawiki-$MW.tar.gz.sig
rm -rf mediawiki-$MW

Tested the site using the https://wiki.transitionnetwork.org/Sandbox page and checked the https://wiki.transitionnetwork.org/Special:Version and everything seems fine.

Note: See TracTickets for help on using tickets.