summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorcsteipp <csteipp@wikimedia.org>2014-01-13 17:51:49 -0800
committercsteipp <csteipp@wikimedia.org>2014-01-13 18:00:54 -0800
commitaf8f32cfe2483c2ab1e0ec3f7e57dbe27e6c6f28 (patch)
treea8eed23471afad90b6e2ac1b45b8d0901376becd
parent926b9e6fcd199b950a32120cbbcd1bf7e19d0056 (diff)
Update Releasenotes and version number for 1.19.101.19.10
Change-Id: I12b5727e9a5bef91a3d12cacaed5da6c2d28b69e
-rw-r--r--RELEASE-NOTES-1.1911
-rw-r--r--includes/DefaultSettings.php2
2 files changed, 12 insertions, 1 deletions
diff --git a/RELEASE-NOTES-1.19 b/RELEASE-NOTES-1.19
index 371b256a5f83..e6d3de0d59cf 100644
--- a/RELEASE-NOTES-1.19
+++ b/RELEASE-NOTES-1.19
@@ -3,6 +3,17 @@
Security reminder: MediaWiki does not require PHP's register_globals
setting since version 1.2.0. If you have it on, turn it '''off''' if you can.
+== MediaWiki 1.19.10 ==
+
+This is a security release of the MediaWiki 1.19 branch.
+
+=== Changes since 1.19.9 ===
+* (bug 57550) SECURITY: Disallow stylesheets in SVG Uploads
+* (bug 58088) SECURITY: Don't normalize U+FF3C to \ in CSS Checks
+* (bug 58472) SECURITY: Disallow -o-link in styles
+* (bug 58553) SECURITY: Return error on invalid XML for SVG Uploads
+* (bug 58699) SECURITY: Fix RevDel log entry information leaks
+
== MediaWiki 1.19.9 ==
This is a security and maintenance release of the MediaWiki 1.19 branch.
diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index f52ec7a886a2..6a099db7c6ca 100644
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -33,7 +33,7 @@ $wgConf = new SiteConfiguration;
/** @endcond */
/** MediaWiki version number */
-$wgVersion = '1.19.9';
+$wgVersion = '1.19.10';
/** Name of the site. It must be changed in LocalSettings.php */
$wgSitename = 'MediaWiki';