summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorReedy <reedy@wikimedia.org>2023-03-30 23:29:15 +0100
committerReedy <reedy@wikimedia.org>2023-03-31 00:14:03 +0100
commit9e5a0b8dda9b7182cdda422fb88db5adc0f7d007 (patch)
treea3bd2166d36c3fa52eca8ee7865b86c0fc38e3de
parenta02f501c8ad6842b60ed7d0b111a57fbe05fabcc (diff)
Prep 1.38.61.38.6
Change-Id: I3ea5996554ff584ca2cebd6fda6ea38ff94c4cc9
-rw-r--r--RELEASE-NOTES-1.384
-rw-r--r--includes/Defines.php2
2 files changed, 4 insertions, 2 deletions
diff --git a/RELEASE-NOTES-1.38 b/RELEASE-NOTES-1.38
index 287f0fa0243a..618d97ffdbee 100644
--- a/RELEASE-NOTES-1.38
+++ b/RELEASE-NOTES-1.38
@@ -6,7 +6,7 @@ PHP 8.2 workboard: https://phabricator.wikimedia.org/tag/php_8.2_support/
== MediaWiki 1.38.6 ==
-THIS IS NOT A RELEASE YET
+This is a security and maintenance release of the MediaWiki 1.38 branch.
=== Changes since MediaWiki 1.38.5 ===
* Localisation updates.
@@ -37,6 +37,8 @@ THIS IS NOT A RELEASE YET
* (T330529) SpecialEditTags: Set default of '' for wpReason.
* (T330526) htmlform: Handle null from HTMLFormField::getDefault in
multiselects.
+* (T285159, CVE-2023-PENDING) SECURITY: Do not apply autoblocks to untrusted
+ XFF headers.
== MediaWiki 1.38.5 ==
diff --git a/includes/Defines.php b/includes/Defines.php
index 6a818f13445e..f03a0ae84b70 100644
--- a/includes/Defines.php
+++ b/includes/Defines.php
@@ -33,7 +33,7 @@ use Wikimedia\Rdbms\IDatabase;
*
* @since 1.35 (also backported to 1.33.3 and 1.34.1)
*/
-define( 'MW_VERSION', '1.38.5' );
+define( 'MW_VERSION', '1.38.6' );
/** @{
* Obsolete IDatabase::makeList() constants