[MediaWiki] [MediaWiki-announce] Announcing MediaWiki 1.46.0

Produit : MediaWiki

Type : Release / Sécurité

CVE : CVE-2026-58025, CVE-2026-58037, CVE-2026-58029, CVE-2026-58024, CVE-2026-58026, CVE-2026-58032, CVE-2026-58033, CVE-2026-58028, CVE-2026-58036, CVE-2026-58035

Date source : 30/06/2026 16:14

Résumé :
I am happy to announce the availability of the general release of MediaWiki
1.46!

Tarballs have already been uploaded, and the git tag has been pushed.

Thanks to everyone who helped out with this release, especially thanks to
those who tested out the release candidate and provided feedback, as well
as the developers who worked on fixes for the 1.46 final release. To see
what's changed in 1.46, see the release notes file.[0] If you encounter any
issues, please file a task.[1] You can see open tasks for the branch on
Phabricator.[2]

MediaWiki 1.46 is due to be supported until the end of July 2026.

It's important to note that 1.46.0 is shipped with the changes released on
the current security and maintenance release.

=== Changes since MediaWiki 1.46.0-rc.0 ===
* (T422244, CVE-2026-58025) SECURITY: Safely unserialize log entry
parameters [CVE-2026-58025]
* (T422995, CVE-2026-58037) SECU

Action recommandée :
Vérifier la version installée et appliquer le correctif si le produit est concerné.

Source : Voir l’annonce officielle