diff options
| author | Kunal Mehta <legoktm@member.fsf.org> | 2018-09-03 01:27:01 -0700 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2018-09-20 19:24:54 +0100 |
| commit | 0e704369adf97f85d71006060bda1c0f9315e75a (patch) | |
| tree | 73d3629aad63523697532bb4a23bd88ceeb2e686 | |
| parent | 2f8cebc92a767ff813fa98a471f9cb7e837471a6 (diff) | |
Change-Id: I0a68db385c1a7b81a9ffe4cdffb801d349022cb4
| -rw-r--r-- | RELEASE-NOTES-1.29 | 6 | ||||
| -rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 5 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.29 b/RELEASE-NOTES-1.29 index b46d2ced6300..8f568420a216 100644 --- a/RELEASE-NOTES-1.29 +++ b/RELEASE-NOTES-1.29 @@ -1,10 +1,12 @@ == MediaWiki 1.29.3 == -THIS IS NOT A RELEASE YET! - This is a security and maintenance release of the MediaWiki 1.29 branch. === Changes since 1.29.2 === +* (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides + 'newbie'. +* (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's + account lock. * (T180551) Fix LanguageSrTest for language converter * (T180552) Fix langauge converter parser test with self-close tags * (T180537) Remove $wgAuth usage from wrapOldPasswords.php diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index f2d21b51871c..d2faf2d97fe8 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -75,7 +75,7 @@ $wgConfigRegistry = [ * MediaWiki version number * @since 1.2 */ -$wgVersion = '1.29.2'; +$wgVersion = '1.29.3'; /** * Name of the site. It must be changed in LocalSettings.php |