diff options
author | Alex Monk <krenair@gmail.com> | 2013-04-15 23:32:34 +0000 |
---|---|---|
committer | Gerrit Code Review <gerrit@wikimedia.org> | 2013-04-15 23:32:34 +0000 |
commit | b903ccb22280e84f3bc22bcdf09b89a5f2d6b7a4 (patch) | |
tree | ac2eea0629e888624e758eca8a90acbcc66e5d1b | |
parent | dbe4f9e5e70441791e30bb207039b95dfd72e925 (diff) | |
parent | 8451cc951a1e4932e6f106e4184f40560743c7a0 (diff) |
Merge "Updated release notes and version number" into REL1_191.19.5
-rw-r--r-- | RELEASE-NOTES-1.19 | 7 | ||||
-rw-r--r-- | includes/DefaultSettings.php | 2 |
2 files changed, 7 insertions, 2 deletions
diff --git a/RELEASE-NOTES-1.19 b/RELEASE-NOTES-1.19 index de61451de8bf..771cd43aac24 100644 --- a/RELEASE-NOTES-1.19 +++ b/RELEASE-NOTES-1.19 @@ -4,10 +4,15 @@ Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it '''off''' if you can. == MediaWiki 1.19.5 == -This has not been released yet. + +This is a security and maintenance release of the MediaWiki 1.19 branch === Changes since 1.19.4 === +* (bug 47251) SECURITY: Disable external entities in Import +* (bug 46859) SECURITY: Disable external entities in XMLReader +* (bug 46084) SECURITY: Sanitize $limitReport before outputting * (bug 43594) Fix notices displayed on PHP 5.4 +* (bug 40585) Don't drop 'step="any"' in HTML input fields. == MediaWiki 1.19.4 == diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 063aaf92b2ac..9c5353aa3915 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -33,7 +33,7 @@ $wgConf = new SiteConfiguration; /** @endcond */ /** MediaWiki version number */ -$wgVersion = '1.19.4'; +$wgVersion = '1.19.5'; /** Name of the site. It must be changed in LocalSettings.php */ $wgSitename = 'MediaWiki'; |