diff options
| author | Kunal Mehta <legoktm@member.fsf.org> | 2018-09-03 01:11:17 -0700 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2018-09-20 19:59:28 +0100 |
| commit | a4c806563471b16c644186618b39b84069c0d04c (patch) | |
| tree | 3a1f9bb67101354e4e3fddfcf793f000317533ad | |
| parent | 845dee9fa4331341fa6ef20d0fd8ffa73c7eb62e (diff) | |
Bump 1.31.11.31.1
Change-Id: I4f1dbc9ddf6daa9e67a08908d0c04db876493b84
| -rw-r--r-- | RELEASE-NOTES-1.31 | 7 | ||||
| -rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 6 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.31 b/RELEASE-NOTES-1.31 index 3fd8dbcda172..b0da15a0df01 100644 --- a/RELEASE-NOTES-1.31 +++ b/RELEASE-NOTES-1.31 @@ -1,10 +1,13 @@ == MediaWiki 1.31.1 == -THIS IS NOT A RELEASE YET! - This is a security and maintenance release of the MediaWiki 1.31 branch. === Changes since MediaWiki 1.31.0 === +* (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides + 'newbie'. +* (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's + account lock. +* (T199029, CVE-2018-13258) SECURITY: Tarball was missing .htaccess files. * (T197229) Bundle Nuke extension, it was accidentally omitted. * (T193995) Fix undefined patchPath() method call in parser tests. * (T198687) Fix various selectFields methods to use the string 'NULL', not null. diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 97e27b7d821f..89b77d28b350 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -71,7 +71,7 @@ $wgConfigRegistry = [ * MediaWiki version number * @since 1.2 */ -$wgVersion = '1.31.0'; +$wgVersion = '1.31.1'; /** * Name of the site. It must be changed in LocalSettings.php |