summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorReedy <reedy@wikimedia.org>2023-12-21 16:53:27 +0000
committerReedy <reedy@wikimedia.org>2023-12-21 16:53:27 +0000
commit8ce0ec548b747aad503f8689223277dd1c697c7f (patch)
treef8a01940d9ba160abc562c8e934d1c5cb9fd6167
parente6f65b18220b7aa356a651d25da7f03f7e3b9ab0 (diff)
Prep 1.41.01.41.0
Change-Id: I2660fc5df1d8d958c98eca9e9d982dab0fd64886
-rw-r--r--RELEASE-NOTES-1.412
-rw-r--r--includes/Defines.php2
2 files changed, 3 insertions, 1 deletions
diff --git a/RELEASE-NOTES-1.41 b/RELEASE-NOTES-1.41
index 49ae057bb7e8..86aeb4eb3acc 100644
--- a/RELEASE-NOTES-1.41
+++ b/RELEASE-NOTES-1.41
@@ -1089,6 +1089,8 @@ because of Phabricator reports.
Title or PageReference. To change the relevant title used for methods
that do not offer an option to set the page, call Parser::setPage.
This affects the methods cleanSig, getSection and replaceSection.
+* (T347726, CVE-2023-PENDING) SECURITY: logging: Fix non-escaped messages
+ used in rights log.
== Compatibility ==
diff --git a/includes/Defines.php b/includes/Defines.php
index 755190946e60..e430896aad2a 100644
--- a/includes/Defines.php
+++ b/includes/Defines.php
@@ -33,7 +33,7 @@ use Wikimedia\Rdbms\IDatabase;
*
* @since 1.35 (also backported to 1.33.3 and 1.34.1)
*/
-define( 'MW_VERSION', '1.41.0-rc.0' );
+define( 'MW_VERSION', '1.41.0' );
/** @{
* Obsolete IDatabase::makeList() constants