MediaWiki 1.38.2
1 July 2022
MediaWiki version 1.38.2 is now available (security release).
Upgrading to MediaWiki 1.38.2
MediaWiki 1.38.2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MediaWiki updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MediaWiki install to test the 1.38.2 upgrade prior to applying it live. Get started managing your MediaWiki installations with Installatron
What's New in MediaWiki 1.38.2
Security
- (T308471) SECURITY: Escape welcomeuser message passed to showSuccessPage().
- (T308473) SECURITY: Escape contributions-title msg for use within page title.
- (T311384, CVE-2022-27776) Updated guzzlehttp/guzzle from 7.4.1 to 7.4.5.
Bug fixes and Changes
- Localisation updates.
- (T309426) Repair language selector for SVGs.
- (T310013) Fix default value for $wgShowEXIF and $wgUsePathInfo.
- (T311272) Call parent constructor of AddSite maintenance script first.
- MediaWiki: Don't eagerly initialize action name.
- (T289926) Avoid passing null to trim() in SkinTemplate.
- (T289879) Address deprecations for PHP 8.1.
- (T311473) rollbackEdits: Pass user identity to RollbackPage.
- Upgrade wikimedia/remex-html from 3.0.1 to 3.0.2.
- (T311551) ShellboxClientFactory::getUrl(): Check if $this->key is null.
- (T311552) ChangesListSpecialPage: Don't pass null to FormatJson::decode().
- (T311569) FileBackend::isStoragePath() Handle being passed null.
- (T311544) Pass int to ApiUsageException::newWithMessage()'s $httpCode param.
- (T311678) SpecialEditWatchlist: Prevent passing null to strtolower().
- (T311554) ChangeTags: Return early in formatSummaryRow() if $tags === null.
- Upgrade wikimedia/common-passwords from 0.3.0 to 0.4.0.