summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormglaser <glaser@hallowelt.biz>2014-09-24 15:50:50 +0200
committermglaser <glaser@hallowelt.biz>2014-09-24 21:02:53 +0200
commit9e6d512f99d57b56b6534f09bb58e2b5fe22ca89 (patch)
treecbf2df62090eb04531f3968f75390338ebc724fc
parentcd5ce2baf8d276ddb867fcb7a9650bddf7f09ea0 (diff)
Updated release notes and version number for MediaWiki 1.23.41.23.4
This is MediaWiki 1.23.4 security and maintenance release. Change-Id: I62067c60794a002e012dc6f8c01b2a2f9fb3ed82
-rw-r--r--RELEASE-NOTES-1.239
-rw-r--r--includes/DefaultSettings.php2
2 files changed, 8 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.23 b/RELEASE-NOTES-1.23
index ac274ca50e80..419bc0f73332 100644
--- a/RELEASE-NOTES-1.23
+++ b/RELEASE-NOTES-1.23
@@ -3,12 +3,17 @@ have it on, turn it '''off''' if you can.
== MediaWiki 1.23.4 ==
-This is a maintenance release of the MediaWiki 1.23 branch.
+This is a security and maintenance release of the MediaWiki 1.23 branch.
=== Changes since 1.23.3 ===
+* (bug 69008) SECURITY: Enhance CSS filtering in SVG files. Filter <style>
+ elements; normalize style elements and attributes before filtering; add
+ checks for attributes that contain css; add unit tests for html5sec and
+ reported bugs.
* (bug 65998) Make MySQLi work with non-standard socket.
-* (bug 66986) GlobalVarConfig shouldn't throw exceptions for null-valued config settings
+* (bug 66986) GlobalVarConfig shouldn't throw exceptions for null-valued config
+ settings.
== MediaWiki 1.23.3 ==
diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 0027c0814f7a..a47d41fdba7d 100644
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -73,7 +73,7 @@ $wgConfigRegistry = array(
* MediaWiki version number
* @since 1.2
*/
-$wgVersion = '1.23.3';
+$wgVersion = '1.23.4';
/**
* Name of the site. It must be changed in LocalSettings.php