summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorcsteipp <csteipp@wikimedia.org>2012-08-31 07:31:43 -0700
committercsteipp <csteipp@wikimedia.org>2012-08-31 07:31:43 -0700
commitf25ee7006ff73f1cdf22cdd11401af31ef691b12 (patch)
treed6a5ced9763f13f37250ce2c36c2987282a6b760
parent0dd5b3ad2d0dd0734c73ee4616503ba868f0ddeb (diff)
Release notes and increment version1.19.2
Change-Id: I390ccbffcea91c5c2c76615e1a2cc7dbf0ed89d8
-rw-r--r--RELEASE-NOTES-1.1912
-rw-r--r--includes/DefaultSettings.php2
2 files changed, 13 insertions, 1 deletions
diff --git a/RELEASE-NOTES-1.19 b/RELEASE-NOTES-1.19
index 29fb0ca22ec5..f219df1832fb 100644
--- a/RELEASE-NOTES-1.19
+++ b/RELEASE-NOTES-1.19
@@ -3,6 +3,18 @@
Security reminder: MediaWiki does not require PHP's register_globals
setting since version 1.2.0. If you have it on, turn it '''off''' if you can.
+== MediaWiki 1.19.2 ==
+
+This is a security release of the MediaWiki 1.19 branch
+
+=== Changes since 1.19.1 ===
+* (bug 39700) File: link to non-existing file can inject html
+* (bug 39823) Hidden block text leaking to admins
+* (bug 39184) LDAP password leakage
+* (bug 39180) Disallow framing of api results
+* (bug 37587) Enforce language codes to be html safe
+* (bug 39824) Check global blocks on account creation
+
== MediaWiki 1.19 ==
MediaWiki 1.19 is a large release that contains many new features and bug
diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 818a80ec3403..acd89bde55e2 100644
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -33,7 +33,7 @@ $wgConf = new SiteConfiguration;
/** @endcond */
/** MediaWiki version number */
-$wgVersion = '1.19.1';
+$wgVersion = '1.19.2';
/** Name of the site. It must be changed in LocalSettings.php */
$wgSitename = 'MediaWiki';