diff options
| author | Reedy <reedy@wikimedia.org> | 2020-03-24 17:29:34 +0000 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2020-03-26 17:51:19 +0000 |
| commit | 748c5eae2fd5d897c94c48771161c259941a7488 (patch) | |
| tree | bbf62264082599693b556a0b4d6962acf1271ca8 | |
| parent | 43fe3f21d48075ebbabcf0825b1520804ca9175e (diff) | |
Bump and prep 1.34.11.34.1
Change-Id: Ib9a2c9426f25c3af54e021a775c99dd9e6baa0b1
| -rw-r--r-- | RELEASE-NOTES-1.34 | 7 | ||||
| -rw-r--r-- | includes/Defines.php | 4 |
2 files changed, 8 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.34 b/RELEASE-NOTES-1.34 index 1313ac2e1793..3597088498c5 100644 --- a/RELEASE-NOTES-1.34 +++ b/RELEASE-NOTES-1.34 @@ -2,7 +2,7 @@ == MediaWiki 1.34.1 == -THIS IS NOT A RELEASE YET +This is a security and maintenance release of the MediaWiki 1.34 branch. === Changes since MediaWiki 1.34.0 === * (T211450) User: better error message when getActorId fails. @@ -18,6 +18,11 @@ THIS IS NOT A RELEASE YET * Add check for page existence to view.php maintenance script. * (T245149) Fix fetching login token from action=query&meta=tokens on private wikis. +* (T236509) SECURITY: Fix HTML escaping in UserGroupMembership::getLink(). +* (T232932) SECURITY: User content can redirect the logout button to different + URL. +* (T246602) SECURITY: jquery.makeCollapsible allows applying event handler to + any CSS selector. == MediaWiki 1.34.0 == diff --git a/includes/Defines.php b/includes/Defines.php index 7ea5102fe772..80996267be15 100644 --- a/includes/Defines.php +++ b/includes/Defines.php @@ -34,9 +34,9 @@ use Wikimedia\Rdbms\IDatabase; * * This replaces the the $wgVersion global found in earlier versions. * - * @since 1.35 + * @since 1.34.1 */ -define( 'MW_VERSION', '1.34.0' ); +define( 'MW_VERSION', '1.34.1' ); # Obsolete aliases |