summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormglaser <glaser@hallowelt.biz>2014-06-25 22:08:19 +0200
committermglaser <glaser@hallowelt.biz>2014-06-25 22:08:19 +0200
commitb523f46c766bcc10500b19b7d4aeb6dcf502c29f (patch)
tree2e661a7765e068a88d2b7981a67dad32cb3f490c
parentcab442127605024506acad03af0fd5b525e9f412 (diff)
Updated release notes and version number to 1.19.171.19.17
This is MediaWiki 1.19.17 security and maintenance release Change-Id: Iee6cc75f90987c10431d923ee79855b6b458b198
-rw-r--r--RELEASE-NOTES-1.1910
-rw-r--r--includes/DefaultSettings.php2
2 files changed, 11 insertions, 1 deletions
diff --git a/RELEASE-NOTES-1.19 b/RELEASE-NOTES-1.19
index 4636c7804056..258e4dac1aab 100644
--- a/RELEASE-NOTES-1.19
+++ b/RELEASE-NOTES-1.19
@@ -3,6 +3,16 @@
Security reminder: MediaWiki does not require PHP's register_globals
setting since version 1.2.0. If you have it on, turn it '''off''' if you can.
+== MediaWiki 1.19.17 ==
+
+This is a security and maintenance release of the MediaWiki 1.19 branch.
+
+=== Changes since 1.19.16 ===
+
+* (bug 65839) SECURITY: Prevent external resources in SVG files.
+* (bug 66428) MimeMagic: Don't seek before BOF. This has weird side effects
+ like only extracting the tail of the file partially or not at all.
+
== MediaWiki 1.19.16 ==
This is a security release of the MediaWiki 1.19 branch.
diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index e9d08ee6deeb..8532b4b56a6c 100644
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -33,7 +33,7 @@ $wgConf = new SiteConfiguration;
/** @endcond */
/** MediaWiki version number */
-$wgVersion = '1.19.16';
+$wgVersion = '1.19.17';
/** Name of the site. It must be changed in LocalSettings.php */
$wgSitename = 'MediaWiki';