[MediaWiki] [MediaWiki-announce] Security pre-release announcement: 1.43.9 / 1.44.6 / 1.45.4

Produit : MediaWiki

Type : Release / Sécurité

Date source : 25/06/2026 22:25

Résumé :
Hi all,

On Monday (2026-06-29) we will be issuing a security and maintenance
release to all supported branches of MediaWiki.

Due to the complexity of various patches that will be released as part of
this, they will be made public in Gerrit before the tarballs and git tags
are made.

We have therefore referenced mitigations for some high severity issues both
in the referenced tickets and below.

It is strongly recommended to apply the mitigations to your MediaWiki
installs ASAP, before the patches are released.

While Timeline/EasyTimeline[2] is *not* a MW Bundled extension, it is used
on Wikimedia wikis and is also widely used across the MediaWiki
installation ecosystem; it is therefore flagged for your attention due to
the issues found. If you do not have this extension installed, you do not
need to do anything for that mitigation.

The new releases will be:
– 1.43.9
– 1.44.6
– 1.45.4

Action recommandée :
Vérifier la version installée et appliquer le correctif si le produit est concerné.

Source : Voir l’annonce officielle