Release Notes: A buggy bug fix for HTML lists from 1.6.4 was rolled back.
Release Notes: Localization updates for Hebrew, German, Croatian, Bosnian, and Slovak. Corrections to parsing of some nested tags. Fixes to several special pages.
Release Notes: A problem with installation and upgrading on some versions of MySQL 4.0.x has been fixed. Deleted pages can now be removed from the watchlist view again.
Release Notes: A regression that caused some extension tags to fail was corrected, as has some bad markup in the German localization. Some installer problems may also be more smoother now.
Release Notes: This release fixes a few bugs that slipped into the initial 1.6.0 release. The updater now works when run from another directory, and warning messages with some configurations of PHP 5 are resolved.
Release Notes: Templates can now have default parameter values, and category memberships and other links are properly updated when templates are edited. Feed generation was upgraded to Atom 1.0; RSS and Atom feeds now colorize diffs for readability. SVG uploads can be passed through a rasterizer program for inline display. The login and page protection forms have been redesigned. New extension points are present to support enhanced anti-spam and other tools.
Release Notes: A bug in decoding of certain encoded links could allow injection of raw HTML into page output, which could potentially lead to XSS attacks.
Release Notes: An installer bug that caused the MySQL administrator password to be changed by mistake instead of the created database user's password was fixed. There was also a fix for a missing logo image in IE7 beta 2.
Release Notes: A bug in edit comment formatting that could send PHP into an infinite loop if certain malformed links were included was fixed. In most installations, this would cause the script to fail after PHP's 30-second failsafe timeout. Some improvements were made to the installer, which should make installation possible on a system with a broken MySQL "root" account.
Release Notes: Detection for uploads of Windows Metafile (.wmf) images was added to help protect against a client-side vulnerability in unpatched Microsoft Windows operating systems. Additionally, a removeUnusedAccounts.php maintenance script was added. This replaces an older Perl script which had not been updated for the new schema in 1.5.