Mediawiki Release Notes

Mediawiki: https://www.mediawiki.org/wiki/Release_notes

• https://github.com/wikimedia/mediawiki

Mediawiki LTS

https://www.mediawiki.org/wiki/Release_notes

• https://www.mediawiki.org/wiki/Release_notes/1.39

• 1.38 2022 https://www.mediawiki.org/wiki/Release_notes/1.38
  • Vector skin modified

• 1.37 September 2021 https://www.mediawiki.org/wiki/Release_notes/1.37

• 1.36 April 2021 https://www.mediawiki.org/wiki/Release_notes/1.36

• 1.35 LTS Jul 2020 https://www.mediawiki.org/wiki/Release_notes/1.35

• 1.33 April 2019 (obsolete) https://www.mediawiki.org/wiki/MediaWiki_1.33

• 1.31 LTS 2018-04-17, EOL 2021/06
  • SECURITY: Do not allow user scripts on Special:PasswordReset.
  • 1.31.9
  • 1.31.8
  • 1.31.7
  • 1.31.6
  • 1.31.5 maintenance release
  • 1.31.4 security and maintenance (Sep 30 2019)
    • SECURITY: Add permission check for suppressed account to Special:Redirect.
  • 1.31.3 maintenance
  • 1.31.2 security and maintenance (Jun 6 2019)
    • SECURITY: User JS may no longer be loaded with mime type text/javascript if there is no account associated with the username
    • SECURITY: Fix an issue that prevents Extension:OAuth working when $wgBlockDisablesLogin is true.
    • SECURITY: action=logout now requires to be posted and have a CSRF token.
    • (T197279) SECURITY: Fix reauth in Special:ChangeEmail.
    • (T208881) SECURITY: blacklist CSS var().
    • (T209794) SECURITY: rate-limit and prevent blocked users from changing email.
    • (T199540) SECURITY: API: Respect $wgBlockCIDRLimit in action=block.
    • (T212118) SECURITY: Fix cache mode for (un)patrolled recent changes query.
    • (T222036, T222038) SECURITY: Add permission check for user is permitted to view the log type.
    • (T221739) SECURITY: resources: Patch jQuery 3.2.1 for CVE-2019-11358.

• • 1.31.1 security and maintenance (Sep 20 2018)
    • (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' override 'newbie'.
    • (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's account lock.
    • (T199029, CVE-2018-13258) SECURITY: Tarball was missing .htaccess files.

• MediaWiki 1.27 LTS 2016-05-31
• MediaWiki 1.23 LTS 2014-04-14. Supported until May 2017.
• MediaWiki 1.21
  • SyntaxHighlight
• MediaWiki 1.19 LTS 2012-02-09
• MediaWiki 1.18
• MediaWiki 1.17
• MediaWiki 1.16 (2010-02-22)

Related

• Mediawiki extensions

See also

• Software Change logs
• Mediawiki: Wikipedia, Install Mediawiki, Install Mediawiki using docker, Mediawiki Release Notes, Manual:Images, php-fpm, Scribunto, Restart mediawiki, NOTOC, /var/www/html/LocalSettings.php (file), wikiless, Nowiki, Wikiapiary, modules, templates, extensions, MediaWiki API, Pro.wiki, /maintenance

https://www.mediawiki.org/wiki/MediaWiki_1.23