diff options
| author | Kunal Mehta <legoktm@member.fsf.org> | 2018-09-03 01:17:15 -0700 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2018-09-20 19:43:17 +0100 |
| commit | a0b31d95610c8f415a2cc29349cdbf14c23c7d4b (patch) | |
| tree | c56b5f2d0809c1d86ac118a82379a2b942a2cf23 | |
| parent | 85eded11f79e568f8f9626809639aade2f169535 (diff) | |
Bump 1.30.11.30.1
Change-Id: I4ba3b98475f8ed0fc05350a91556d771609fd900
| -rw-r--r-- | RELEASE-NOTES-1.30 | 6 | ||||
| -rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 5 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.30 b/RELEASE-NOTES-1.30 index fbcd768f2e76..0e5873d3398c 100644 --- a/RELEASE-NOTES-1.30 +++ b/RELEASE-NOTES-1.30 @@ -1,10 +1,12 @@ == MediaWiki 1.30.1 == -THIS IS NOT A RELEASE YET! - This is a security and maintenance release of the MediaWiki 1.30 branch. === Changes since MediaWiki 1.30.0 === +* (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides + 'newbie'. +* (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's + account lock. * (T87572) Make FormatMetadata::flattenArrayReal() work for an associative array. * Updated composer/spdx-licenses from 1.1.4 to 1.3.0 (development dependency). * (T189567) the CLI installer (maintenance/install.php) learned to detect and diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index c39c01384ed7..4f29dcf6dede 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -75,7 +75,7 @@ $wgConfigRegistry = [ * MediaWiki version number * @since 1.2 */ -$wgVersion = '1.30.0'; +$wgVersion = '1.30.1'; /** * Name of the site. It must be changed in LocalSettings.php |