
brion at pobox
Oct 26, 2005, 3:55 AM
Post #1 of 1
(1517 views)
Permalink
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MediaWiki 1.5.1 is a bugfix and security maintenance release, and is a recommended upgrade for all installations. This release includes further corrections to the inline CSS style sanitation which works around a JavaScript "feature" on Microsoft Internet Explorer. Users of Microsoft Internet Explorer for Windows may be vulnerable to XSS injections on prior versions; users of standards-compliant browsers are not vulnerable. Major fixes include: * Image pages work again with resizing disabled * Works in MySQL 5.0 strict mode There is experimental support in this release for explicitly declaring the UTF-8 charset in the database; this has been tested with MySQL 5.0.15 but should work on 4.1 as well. IMPORTANT: Changing this setting on an existing wiki may produce interesting data corruption, depending on server configuration. Page contents should, usually, be unaffected, but page titles and other items may be. Limitations in MySQL's Unicode support mean that characters outside the BMP cannot be used in page titles or various other fields when using this mode. Table definitions are in maintenance/mysql5/tables.sql, and the runtime option to send 'SET NAMES utf8' is set by $wgDBmysql5 = true. (MySQL 3.23.x and 4.0.x do not support character set declarations; on these versions MediaWiki simply works with UTF-8 data and MySQL is blissfully unaware of it.) Release notes: http://sourceforge.net/project/shownotes.php?release_id=366110 Download: http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.1.tar.gz?download MD5 checksum: f2030d3302a899f4e4f2e6d9f3842067 SHA-1 checksum: ff4c843f132ca54ef85b2a15fb42498a54f0ae33 Before asking for help, try the FAQ: http://meta.wikimedia.org/wiki/MediaWiki_FAQ Low-traffic release announcements mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l Bug report system: http://bugzilla.wikimedia.org/ Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net - -- brion vibber (brion @ pobox.com) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDX2C5wRnhpk1wk44RAjcFAKCreSnX6H9AlrTJPYAqW9cOcejTQgCgoqk3 k+lb4bVzuxytsf1Xvgv8z3E= =flUz -----END PGP SIGNATURE----- _______________________________________________ MediaWiki-announce mailing list MediaWiki-announce [at] wikimedia http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce
|