[MediaWiki] [MediaWiki-announce] Security and maintenance release: 1.43.7 / 1.44.4 / 1.45.2

Produit : MediaWiki

Type : Release / Sécurité

CVE : CVE-2026-34092, CVE-2026-34088, CVE-2026-34091, CVE-2026-34090, CVE-2026-34087, CVE-2026-34093, CVE-2026-34086, CVE-2026-34094, CVE-2026-34089, CVE-2026-34095, CVE-2026-5266

Date source : 31/03/2026 23:06

Résumé :
I would like to announce the release of MediaWiki 1.43.7, 1.44.4 and 1.45.2!

These releases serve as security and maintenance releases for these
branches.

They ended up a little later than expected in the day, due a last minute
addition of the fix to Echo in T420154.

The tarballs have already been uploaded as of this email, and the git tags
will be pushed shortly.

A "MediaWiki Extensions Security Release Supplement" e-mail will follow
this one, covering security updates for non-bundled extensions.

Reports of bugs with PHP 8.0 to 8.5 support are particularly welcome, and
fixes will be back-ported when possible. If you find issues that haven't
been backported, please report these too, referring to the relevant
supported release.

PHP 8.x workboards:
* https://phabricator.wikimedia.org/tag/php_8.0_support/
* https://phabricator.wikimedia.org/tag/php_8.1_support/
* https://phabricator.w

Action recommandée :
Vérifier la version installée et appliquer le correctif si le produit est concerné.

Source : Voir l’annonce officielle