MediaWiki 1.34.1
6 April 2020
MediaWiki version 1.34.1 is now available (security release).
Upgrading to MediaWiki 1.34.1
MediaWiki 1.34.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MediaWiki updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MediaWiki install to test the 1.34.1 upgrade prior to applying it live. Get started managing your MediaWiki installations with Installatron
What's New in MediaWiki 1.34.1
Security
- (T236509) SECURITY: Fix HTML escaping in UserGroupMembership::getLink().
- (T232932) SECURITY: User content can redirect the logout button to different URL.
- (T246602) SECURITY: jquery.makeCollapsible allows applying event handler to any CSS selector.
Bug Fixes
- (T211450) User: better error message when getActorId fails.
- (T241340) Don't redefine MW_ENTRY_POINT in thumb.php if already defined.
- (T236444) User: Allow newSystemUser() to create over anonymous actors.
- (T238483) Fix NewPagesPager "hide registered users" option.
- (T245072) mediawiki.language: Rename languageData back to languageNames.
- Use proper SemVer comparison in CheckComposerLockUpToDate.
- (T212738) Add the MW_VERSION constant, global $wgVersion is soft deprecated.
- (T246127) Fix error when initialising updateCollation.php.
- Update comment about PHP versions supported by The PHP Group.
- (T247215) Fix output of RecountCategories::doWork().
- Add check for page existence to view.php maintenance script.
- (T245149) Fix fetching login token from action=query&meta=tokens on private wikis.