summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorReedy <reedy@wikimedia.org>2017-11-14 00:08:55 +0000
committerReedy <reedy@wikimedia.org>2017-11-14 22:03:41 +0000
commit5b8550664eb63005eef537e3aaef6d4b1612b974 (patch)
treebcdfacce59094fa5a7a14734e60b296e24770e45
parente73a2d8c5179fa960cde87c1a2146793b7e1f259 (diff)
Bump 1.28.31.28.3
Change-Id: Ia60c0a784a84b63249f24441c4af2de6037a8edb
-rw-r--r--RELEASE-NOTES-1.2814
-rw-r--r--includes/DefaultSettings.php2
2 files changed, 12 insertions, 4 deletions
diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28
index 8755b4d96edb..06ddddcd2168 100644
--- a/RELEASE-NOTES-1.28
+++ b/RELEASE-NOTES-1.28
@@ -1,7 +1,8 @@
-== MediaWiki 1.28.1 ==
-This is not a release yet!
+== MediaWiki 1.28.3 ==
+
+This is a security and maintenance release of the MediaWiki 1.28 branch.
-=== Changes since 1.28.1 ==
+=== Changes since 1.28.2 ==
* (T168856) Allow SVGs created by Dia to be uploaded.
* (T157545) Add missing doUpdates() call to refreshLinks.php.
* (T165714) (T100085) Better handling of jobs execution in post-connection shutdown.
@@ -29,6 +30,13 @@ This is not a release yet!
* (T124404) SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit.
* (T119158) SECURITY: Handle -{}- syntax in attributes safely.
+== MediaWiki 1.28.2 ==
+
+Due to a packaging error, the wrong version of the SyntaxHighlight extension was
+included in the tarball version of MediaWiki 1.28.1. The version included had a
+serious security issue in it (T158689). There was also some minor code fixes in
+MediaWiki itself since 1.28.1, but none of them were security relevant.
+
== MediaWiki 1.28.1 ==
This is a security and maintenance release of the MediaWiki 1.28 branch.
diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 3435f0b82d05..5ac198d9360e 100644
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -75,7 +75,7 @@ $wgConfigRegistry = [
* MediaWiki version number
* @since 1.2
*/
-$wgVersion = '1.28.2';
+$wgVersion = '1.28.3';
/**
* Name of the site. It must be changed in LocalSettings.php