diff options
author | Reedy <reedy@wikimedia.org> | 2017-11-14 00:08:55 +0000 |
---|---|---|
committer | Reedy <reedy@wikimedia.org> | 2017-11-14 22:03:41 +0000 |
commit | 5b8550664eb63005eef537e3aaef6d4b1612b974 (patch) | |
tree | bcdfacce59094fa5a7a14734e60b296e24770e45 | |
parent | e73a2d8c5179fa960cde87c1a2146793b7e1f259 (diff) |
Bump 1.28.31.28.3
Change-Id: Ia60c0a784a84b63249f24441c4af2de6037a8edb
-rw-r--r-- | RELEASE-NOTES-1.28 | 14 | ||||
-rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 12 insertions, 4 deletions
diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28 index 8755b4d96edb..06ddddcd2168 100644 --- a/RELEASE-NOTES-1.28 +++ b/RELEASE-NOTES-1.28 @@ -1,7 +1,8 @@ -== MediaWiki 1.28.1 == -This is not a release yet! +== MediaWiki 1.28.3 == + +This is a security and maintenance release of the MediaWiki 1.28 branch. -=== Changes since 1.28.1 == +=== Changes since 1.28.2 == * (T168856) Allow SVGs created by Dia to be uploaded. * (T157545) Add missing doUpdates() call to refreshLinks.php. * (T165714) (T100085) Better handling of jobs execution in post-connection shutdown. @@ -29,6 +30,13 @@ This is not a release yet! * (T124404) SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit. * (T119158) SECURITY: Handle -{}- syntax in attributes safely. +== MediaWiki 1.28.2 == + +Due to a packaging error, the wrong version of the SyntaxHighlight extension was +included in the tarball version of MediaWiki 1.28.1. The version included had a +serious security issue in it (T158689). There was also some minor code fixes in +MediaWiki itself since 1.28.1, but none of them were security relevant. + == MediaWiki 1.28.1 == This is a security and maintenance release of the MediaWiki 1.28 branch. diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 3435f0b82d05..5ac198d9360e 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -75,7 +75,7 @@ $wgConfigRegistry = [ * MediaWiki version number * @since 1.2 */ -$wgVersion = '1.28.2'; +$wgVersion = '1.28.3'; /** * Name of the site. It must be changed in LocalSettings.php |