diff options
| author | Pierre Schmitz <pierre@archlinux.de> | 2008-10-02 23:23:21 +0200 |
|---|---|---|
| committer | Pierre Schmitz <pierre@archlinux.de> | 2008-10-02 23:23:21 +0200 |
| commit | e90580ee6f97e4be0141679447b0aaec3a0081ea (patch) | |
| tree | b29cf8944285f752a576b392502fb850345a13bb /RELEASE-NOTES | |
| parent | 24c464c9ee15b0d204c41fcd212975ebc7864904 (diff) | |
Update auf 1.13.2
Diffstat (limited to 'RELEASE-NOTES')
| -rw-r--r-- | RELEASE-NOTES | 17 |
1 files changed, 14 insertions, 3 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 8cf00a43..9ee7bd92 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -3,11 +3,12 @@ Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it *off* if you can. -== MediaWiki 1.13.1 == +== MediaWiki 1.13.2 == -September 6, 2008 +October 2, 2008 -This is a bugfix release of the Summer 2008 snapshot release of MediaWiki. +This is a security and bugfix release of the Summer 2008 snapshot release of +MediaWiki. MediaWiki is now using a "continuous integration" development model with quarterly snapshot releases. The latest development code is always kept @@ -20,6 +21,16 @@ will be made on the development trunk and appear in the next quarterly release. Those wishing to use the latest code instead of a branch release can obtain it from source control: http://www.mediawiki.org/wiki/Download_from_SVN +== Changes since 1.13.1 == + +* Security: Work around misconfiguration by requiring strict comparisons for + in_array in User::isAllowed(). +* (bug 14944) Added $wgShellLocale for configuration of an appropriate locale + to use for LC_CTYPE during shell invocation. For servers that don't have + en_US.utf8. Also added locale detection during install. +* Localisation updates +* Security: Fixed XSS vulnerability in useskin parameter. + == Changes since 1.13.0 * (bug 15460) Fixed intermittent deadlock errors and poor concurrent |