diff options
| author | Brion Vibber <brion@users.mediawiki.org> | 2005-04-21 01:45:48 +0000 |
|---|---|---|
| committer | Brion Vibber <brion@users.mediawiki.org> | 2005-04-21 01:45:48 +0000 |
| commit | 5cd9872e17fc32df5b9012fabed9b4b7eca30a1f (patch) | |
| tree | 5083a58d82629e2b6c7dbba61c3477e55a4089a2 | |
| parent | 67017df58d0d6fff3a9c80debc771c654afc00dd (diff) | |
Bump to 1.3.12 maintenance release1.3.12
Notes
http://mediawiki.org/wiki/Special:Code/MediaWiki/8475
| -rw-r--r-- | RELEASE-NOTES | 15 | ||||
| -rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 16 insertions, 1 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES index d031aa4ec03a..b18e336e817c 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -3,6 +3,21 @@ Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it *off* if you can. +== Version 1.3.12, 2005-02-20 == + +MediaWiki 1.3.12 is a security maintenance release. + +A cross-site scripting injection vulnerability was discovered, which +affects only MSIE clients and is only open if MediaWiki has been +manually configured to run output through HTML Tidy ($wgUseTidy). + +The 1.3.x series is no longer maintained except for security fixes; +new users and those seeking bug fixes should upgrade to 1.4.2. +Existing 1.3.x installations using Tidy not willing to upgrade +to the current stable relase should either turn off Tidy or update +the installation to 1.3.12. + + == Version 1.3.11, 2005-02-20 == MediaWiki 1.3.11 is a security release. diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 471552d68a16..f8ca20f702e2 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -9,7 +9,7 @@ if( defined( "MEDIAWIKI" ) ) { # like $wgScriptPath, you must also localize everything that # depends on it. -$wgVersion = '1.3.11'; +$wgVersion = '1.3.12'; $wgSitename = 'MediaWiki'; # Please customize! $wgMetaNamespace = FALSE; # will be same as you set $wgSitename |