Security pre-release announcement: 1.39.16 / 1.43.6 / 1.44.3 / 1.45.1

--===============6954266529163224701==
Content-Type: multipart/alternative; boundary="00000000000058f8160645795e05"

--00000000000058f8160645795e05
Content-Type: text/plain; charset="UTF-8"

Hi all,

This week, either on Tuesday or Wednesday, we will be issuing a security
and maintenance release to all supported branches of MediaWiki.

The new releases will be:

- 1.39.16
- 1.43.6
- 1.44.3
- 1.45.1

This will also resolve security issues in bundled extensions, along with
bug fixes included for maintenance reasons.

These security issues also affect many unsupported versions of MediaWiki.

We will make the fixes available in the respective release branches and
master in git. Tarballs will be available for the above mentioned point
releases as well.

A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow later.

As a reminder, MediaWiki 1.35 became end of life (EOL) in December 2023,
MediaWiki 1.40 became EOL in June 2024, MediaWiki 1.41 became EOL in
December 2024 and MediaWiki 1.42 became EOL in June 2025.

MediaWiki 1.39 (the old LTS before 1.43) becomes EOL at the end of the
month - December 2025. It is strongly recommended to upgrade to 1.43 (the
next LTS after 1.39), which will be supported until December 2027.

A formal EOL email for MediaWiki 1.39 will come later this month. This is
because as per our support policy, it is to be supported until the end of
the month, but we are not expecting any further changes to be made to the
branch.

More information on these timelines can be viewed on the Version lifecycle
page at [1].

[1] https://www.mediawiki.org/wiki/Version_lifecycle

--00000000000058f8160645795e05
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi all,<br><br>This week, either on Tuesday or Wednesday, =
we will be issuing a security and maintenance release to all supported bran=
ches of MediaWiki.<br><br>The new releases will be:<br><br>- 1.39.16<br>- 1=
.43.6<br>- 1.44.3<br>- 1.45.1<br><br>This will also resolve security issues=
 in bundled extensions, along with bug fixes included for maintenance reaso=
ns.<br><br>These security issues also affect many unsupported versions of M=
ediaWiki.<br><br>We will make the fixes available in the respective release=
 branches and master in git. Tarballs will be available for the above menti=
oned point releases as well.<br><br>A summary of some of the security fixes=
 that have gone into non-bundled MediaWiki extensions will also follow late=
r.<br><br>As a reminder, MediaWiki 1.35 became end of life (EOL) in Decembe=
r 2023, MediaWiki 1.40 became EOL in June 2024, MediaWiki 1.41 became EOL i=
n December 2024 and MediaWiki 1.42 became EOL in June 2025.<br><br>MediaWik=
i 1.39 (the old LTS before 1.43) becomes EOL at the end of the month - Dece=
mber 2025. It is strongly recommended to upgrade to 1.43 (the next LTS afte=
r 1.39), which will be supported until December 2027.<br><br>A formal EOL e=
mail for MediaWiki 1.39 will come later this month. This is because as per =
our support policy, it is to be supported until the end of the month, but w=
e are not expecting any further changes to be made to the branch.<br><br>Mo=
re information on these timelines can be viewed on the Version lifecycle pa=
ge at [1].<br><br>[1] <a href=3D"https://www.mediawiki.org/wiki/Version_lif=
ecycle">https://www.mediawiki.org/wiki/Version_lifecycle</a></div>

--00000000000058f8160645795e05--

--===============6954266529163224701==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
MediaWiki-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/mediawiki-l.lists.wikimedia.org/
--===============6954266529163224701==--