summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorReedy <reedy@wikimedia.org>2023-03-30 23:31:04 +0100
committerReedy <reedy@wikimedia.org>2023-03-31 00:14:50 +0100
commit2fdadd4096268cebab8fbc2f245dd441e2f05536 (patch)
treee9453bda56c70261a1a156260195b85e1f8714be
parentb1309335c4558e40cea26fb65ad29b63231d8f93 (diff)
Prep 1.39.31.39.3
Change-Id: I708ea9db7bd533082d5eb15bb8f0d03fd3f55297
-rw-r--r--RELEASE-NOTES-1.394
-rw-r--r--includes/Defines.php2
2 files changed, 4 insertions, 2 deletions
diff --git a/RELEASE-NOTES-1.39 b/RELEASE-NOTES-1.39
index 5400765f2cbb..857e3b5b32f1 100644
--- a/RELEASE-NOTES-1.39
+++ b/RELEASE-NOTES-1.39
@@ -6,7 +6,7 @@ PHP 8.2 workboard: https://phabricator.wikimedia.org/tag/php_8.2_support/
== MediaWiki 1.39.3 ==
-THIS IS NOT A RELEASE YET
+This is a security and maintenance release of the MediaWiki 1.39 branch.
=== Changes since MediaWiki 1.39.2 ===
* Localisation updates.
@@ -23,6 +23,8 @@ THIS IS NOT A RELEASE YET
* (T318103) mediawiki.storage: Disable async GC during integration test.
* (T332461, T332397) TempFSFile: Keep the WeakMap alive.
* (T332902) page: fix InvalidArgumentException in SQLPlatform::makeList.
+* (T285159, CVE-2023-PENDING) SECURITY: Do not apply autoblocks to untrusted
+ XFF headers.
== MediaWiki 1.39.2 ==
diff --git a/includes/Defines.php b/includes/Defines.php
index 87e001037ce4..79364f096557 100644
--- a/includes/Defines.php
+++ b/includes/Defines.php
@@ -33,7 +33,7 @@ use Wikimedia\Rdbms\IDatabase;
*
* @since 1.35 (also backported to 1.33.3 and 1.34.1)
*/
-define( 'MW_VERSION', '1.39.2' );
+define( 'MW_VERSION', '1.39.3' );
/** @{
* Obsolete IDatabase::makeList() constants