summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorReedy <reedy@wikimedia.org>2023-03-30 23:27:36 +0100
committerReedy <reedy@wikimedia.org>2023-03-31 00:34:54 +0100
commit75c8f0aa3abe70b22058fb2de7d41c3eac8b6aba (patch)
tree640705a86739b84dcb61d169df6776ae95314652
parente4976b0b532299eeed668e9b406ca8f08c8081cb (diff)
Prep 1.35.101.35.10
Change-Id: I88d9b496f5bead198eb94c7fc728b2732cdd1b73
-rw-r--r--RELEASE-NOTES-1.354
-rw-r--r--includes/Defines.php2
2 files changed, 4 insertions, 2 deletions
diff --git a/RELEASE-NOTES-1.35 b/RELEASE-NOTES-1.35
index c8d5d0765823..04d0e71fe29d 100644
--- a/RELEASE-NOTES-1.35
+++ b/RELEASE-NOTES-1.35
@@ -13,7 +13,7 @@ PHP 8.2 workboard: https://phabricator.wikimedia.org/tag/php_8.2_support/
== MediaWiki 1.35.10 ==
-THIS IS NOT A RELEASE YET
+This is a security and maintenance release of the MediaWiki 1.35 branch.
=== Changes since MediaWiki 1.35.9 ===
* Localisation updates.
@@ -42,6 +42,8 @@ THIS IS NOT A RELEASE YET
* (T330529) SpecialEditTags: Set default of '' for wpReason.
* (T330526) htmlform: Handle null from HTMLFormField::getDefault in
multiselects.
+* (T285159, CVE-2023-PENDING) SECURITY: Do not apply autoblocks to untrusted
+ XFF headers.
== MediaWiki 1.35.9 ==
diff --git a/includes/Defines.php b/includes/Defines.php
index 2b7195415cc7..022dc9645c8b 100644
--- a/includes/Defines.php
+++ b/includes/Defines.php
@@ -37,7 +37,7 @@ use Wikimedia\Rdbms\IDatabase;
*
* @since 1.35
*/
-define( 'MW_VERSION', '1.35.9' );
+define( 'MW_VERSION', '1.35.10' );
# Obsolete aliases