diff options
| author | Kunal Mehta <legoktm@member.fsf.org> | 2018-09-03 01:29:59 -0700 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2018-09-20 18:59:33 +0100 |
| commit | 5eda979890704fa8974f3ee9df6a67175a0f78e7 (patch) | |
| tree | 66cf9d1729d688be13ac15e89c5d24c3f62fb1df | |
| parent | b61afd1ece6a5247405894276b4068cce8f9d957 (diff) | |
Bump 1.27.51.27.5
Change-Id: Ie3a700f85b2dda76b37b2cec28f09e9804531a8a
| -rw-r--r-- | RELEASE-NOTES-1.27 | 6 | ||||
| -rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 5 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.27 b/RELEASE-NOTES-1.27 index 8cc67eb37e0a..9f8bbdcff513 100644 --- a/RELEASE-NOTES-1.27 +++ b/RELEASE-NOTES-1.27 @@ -1,10 +1,12 @@ == MediaWiki 1.27.5 == -THIS IS NOT A RELEASE YET! - This is a security and maintenance release of the MediaWiki 1.27 branch. === Changes since 1.27.4 === +* (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides + 'newbie'. +* (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's + account lock. * Upgraded Moment.js from v2.8.4 to v2.19.3. * (T160298) Fixed Special:ActiveUsers due to bad backport. * (T87572) Make FormatMetadata::flattenArrayReal() work for an associative array. diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index c4d82f839682..002d16b0a265 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -75,7 +75,7 @@ $wgConfigRegistry = [ * MediaWiki version number * @since 1.2 */ -$wgVersion = '1.27.4'; +$wgVersion = '1.27.5'; /** * Name of the site. It must be changed in LocalSettings.php |