From d43bf442ab472de9ad9db6b62e9f7b02e580f466 Mon Sep 17 00:00:00 2001 From: Pierre Schmitz Date: Tue, 16 Apr 2013 05:29:15 +0200 Subject: Update to MediaWiki 1.20.4 --- RELEASE-NOTES-1.20 | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'RELEASE-NOTES-1.20') diff --git a/RELEASE-NOTES-1.20 b/RELEASE-NOTES-1.20 index a7197ec1..d03ca1fa 100644 --- a/RELEASE-NOTES-1.20 +++ b/RELEASE-NOTES-1.20 @@ -3,6 +3,14 @@ Security reminder: MediaWiki does not require PHP's register_globals setting since version 1.2.0. If you have it on, turn it '''off''' if you can. +== MediaWiki 1.20.4 == + +This is a security release of the MediaWiki 1.20 branch. + +=== Changes since 1.20.3 === +* (bug 47251) SECURITY: Disable external entities in Import +* (bug 46859) SECURITY: Disable external entities in XMLReader +* (bug 46084) SECURITY: Sanitize $limitReport before outputting == MediaWiki 1.20.3 == -- cgit v1.2.2