Changes between Initial Version and Version 1 of Ticket #766


Ignore:
Timestamp:
07/30/14 22:04:45 (2 years ago)
Author:
chris
Comment:

Sorry pasted in the last email not the latest one.

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #766

    • Property Summary changed from MediaWiki Security and Maintenance Update 1.23.1 to MediaWiki Security and Maintenance Update 1.23.2

  • Ticket #766 – Description

    initial v1  
    1 From the [http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-June/000155.html MediaWiki-announce] list: 
     1From the [http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-July/000157.html MediaWiki-announce] list: 
    22 
    3 > I would like to announce the release of MediaWiki 1.19.17, 1.21.11, 1.22.8 and 1.23.1. This is a regular security and maintenance release. Download links are given at the end of this email.  
     3> I would like to announce the release of MediaWiki 1.23.2, 1.22.9 and 1.19.18. This is a regular security and maintenance release. Download links are given at the end of this email.  
    44>  
    55> == Security == 
    6 > * (bug 65839) SECURITY: Prevent external resources in SVG files. 
     6> * (bug 68187) SECURITY: Prepend jsonp callback with comment. 
     7> * (bug 66608) SECURITY: Fix for XSS issue in bug 66608: Generate the URL used for loading a new page in Javascript,instead of relying on the URL in the link that has been clicked. 
     8> * (bug 65778) SECURITY: Copy prevent-clickjacking between !OutputPage and !ParserOutput. 
    79>  
    8 > == Bugfixes in 1.23.1 == 
     10> == Bugfixes in 1.23.2 == 
     11> * (bug 68313) Preferences: Turn stubthreshold back into a combo box. 
     12> * (bug 65214) Fix initSiteStats.php maintenance script. 
     13> * (bug 67594) Special:ActiveUsers: Fix to work with PostgreSQL. 
    914>  
    10 > * (bug 67025) Special:Watchlist: Don't try to render empty row 
    11 > * (bug 66922) Don't allow some E_NOTICE messages to end up in the !LocalSettings.php. 
    12 > * (bug 66467) Filebackend: Avoid using popen() when "parallelize" is disabled 
    13 > * (bug 66428) !MimeMagic: Don't seek before BOF. This has weird side effects like only extracting the tail of the file partially or not at all. 
    14 > * (bug 66182) Removed -x flag on some php files. 
    15 >  
    16 > Full release notes for 1.23.1: 
     15> Full release notes for 1.23.2: 
    1716> https://www.mediawiki.org/wiki/Release_notes/1.23 
    1817>  
    1918> Public keys: 
    20 > https://www.mediawiki.org/keys/keys.html 
     19> <https://www.mediawiki.org/keys/keys.html> 
    2120>  
    22 > == 1.23.1 == 
     21> == 1.23.2 == 
    2322> 
    2423> Download: 
    25 > http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.tar.gz 
     24> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz 
    2625>  
    27 > Patch to previous version (1.23.0): 
    28 > http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.patch.gz 
     26> Patch to previous version (1.23.1): 
     27> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz 
    2928>  
    3029> GPG signatures: 
    31 > http://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.1.tar.gz.sig 
    32 > http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.tar.gz.sig 
    33 > http://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.1.patch.gz.sig 
     30> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.2.tar.gz.sig 
     31> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.tar.gz.sig 
     32> https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.2.patch.gz.sig 
    3433>  
    3534> Note: