From 3bddedf685051638fdba61268ad195fee041db1c Mon Sep 17 00:00:00 2001 From: Pierre Schmitz Date: Wed, 2 Feb 2011 07:54:46 +0100 Subject: update to MediaWiki 1.16.2 --- RELEASE-NOTES | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) (limited to 'RELEASE-NOTES') diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 4afdef47..71534ca4 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -1,8 +1,8 @@ = MediaWiki release notes = -== MediaWiki 1.16.1 == +== MediaWiki 1.16.2 == -2011-01-04 +2011-02-01 This is a security and maintenance release of the MediaWiki 1.16 branch. @@ -44,6 +44,16 @@ set $wgCacheDirectory to a writable path on the local filesystem. Make sure you have the DBA extension for PHP installed, this will improve performance further. +== Changes since 1.16.1 == + +* (bug 26642) Fixed incorrect translated namespace due to a regression in the + language converter. +* The interface translations were updated. +* (bug 27093, CVE-2011-0047): Fixed CSS injection vulnerability. +* (bug 27094) Fixed server-side arbitrary script inclusion vulnerability. + Affects Windows servers only. A malicious file with extension ".php" must + exist on the server for the exploit to be effective. + == Changes since 1.16.0 == * (bug 24981) Allow extensions to access SpecialUpload variables again -- cgit v1.2.2