diff options
| author | Reedy <reedy@wikimedia.org> | 2023-12-21 16:49:48 +0000 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2023-12-21 16:49:48 +0000 |
| commit | b886c60c6af24561c805d1d7a2dd6cc0618a53c7 (patch) | |
| tree | df21c1b9aa8de76d35a85bbbce935d069404a1b7 | |
| parent | a885c8531c24f86b1ec4a660c1c171e317114f0a (diff) | |
Prep 1.40.21.40.2
Change-Id: I4d366d774ba09735dd04894d197b335572d8e0b2
| -rw-r--r-- | RELEASE-NOTES-1.40 | 7 | ||||
| -rw-r--r-- | includes/Defines.php | 2 |
2 files changed, 6 insertions, 3 deletions
diff --git a/RELEASE-NOTES-1.40 b/RELEASE-NOTES-1.40 index 6d5988c32f3b..0fb3dd830945 100644 --- a/RELEASE-NOTES-1.40 +++ b/RELEASE-NOTES-1.40 @@ -7,7 +7,7 @@ PHP 8.3 workboard: https://phabricator.wikimedia.org/tag/php_8.3_support/ == MediaWiki 1.40.2 == -THIS IS NOT A RELEASE YET +This is a security and maintenance release of the MediaWiki 1.40 branch. === Changes since MediaWiki 1.40.1 === * Localisation updates. @@ -21,7 +21,8 @@ THIS IS NOT A RELEASE YET * Updated wikimedia/timestamp from 4.1.0 to 4.1.1. * tests: Provide coverage for StatusValue::__toString. * StatusValue: Improve logging/debug output with multibyte characters. -* logging: Fix non-escaped messages used in rights log. +* (T347726, CVE-2023-PENDING) SECURITY: logging: Fix non-escaped messages + used in rights log. * Updated wikimedia/parsoid from 0.17.0 to 0.17.1. * (T229992) LocalisationCache: Preserve fallback source language info. * (T340840) Title: Check local fallbacks for system message. @@ -41,6 +42,8 @@ THIS IS NOT A RELEASE YET ($string) of type string is deprecated". * maintenance: Add missing parenthesis to SQL in attachLatest.php. * (T321234) Make MagicWordArray not fail on old revs with broken UTF-8. +* thumb: Fix "PHP Deprecated: strlen(): Passing null to parameter". +* (T327007) htmlform: Correct validation for file input field. == MediaWiki 1.40.1 == diff --git a/includes/Defines.php b/includes/Defines.php index 31532fc556a4..a26e611a0734 100644 --- a/includes/Defines.php +++ b/includes/Defines.php @@ -33,7 +33,7 @@ use Wikimedia\Rdbms\IDatabase; * * @since 1.35 (also backported to 1.33.3 and 1.34.1) */ -define( 'MW_VERSION', '1.40.1' ); +define( 'MW_VERSION', '1.40.2' ); /** @{ * Obsolete IDatabase::makeList() constants |