[TOPF] [MediaWiki-announce] (no subject)

Hi all, On Monday we will be issuing a security and maintenance release to all supported branches of MediaWiki. The new releases will be: - 1.39.9 - 1.41.3 - 1.42.2 This will resolve one security issue in a bundled extension, along with bug fixes included for maintenance reasons. This security issue affects many unsupported versions of MediaWiki. This release may or may not be made with a CVE number formally attached, due to the recent delays in receiving them from MITRE. We will make the fixes available in the respective release branches and master in git. Tarballs will be available for the above mentioned point releases as well. A summary of some of the security fixes that have gone into non-bundled MediaWiki extensions will also follow later. As a reminder, MediaWiki 1.35 became end of life (EOL) in December 2023, and MediaWiki 1.40 became EOL in June 2024. It is strongly recommended to upgrade to either 1.39 (the next LTS after 1.35), which will be supported until November 2025, 1.41, which will be supported until December 2024, or 1.42, which will be supported until June 2025. [1] https://www.mediawiki.org/wiki/Version_lifecycle _______________________________________________ MediaWiki-announce mailing list -- mediawiki-announce(a)lists.wikimedia.org To unsubscribe send an email to mediawiki-announce-leave(a)lists.wikimedia.org