From a4c806563471b16c644186618b39b84069c0d04c Mon Sep 17 00:00:00 2001 From: Kunal Mehta Date: Mon, 3 Sep 2018 01:11:17 -0700 Subject: [PATCH] Bump 1.31.1 Change-Id: I4f1dbc9ddf6daa9e67a08908d0c04db876493b84 --- RELEASE-NOTES-1.31 | 7 +++++-- includes/DefaultSettings.php | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/RELEASE-NOTES-1.31 b/RELEASE-NOTES-1.31 index 3fd8dbcda1..b0da15a0df 100644 --- a/RELEASE-NOTES-1.31 +++ b/RELEASE-NOTES-1.31 @@ -1,10 +1,13 @@ == MediaWiki 1.31.1 == -THIS IS NOT A RELEASE YET! - This is a security and maintenance release of the MediaWiki 1.31 branch. === Changes since MediaWiki 1.31.0 === +* (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides + 'newbie'. +* (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's + account lock. +* (T199029, CVE-2018-13258) SECURITY: Tarball was missing .htaccess files. * (T197229) Bundle Nuke extension, it was accidentally omitted. * (T193995) Fix undefined patchPath() method call in parser tests. * (T198687) Fix various selectFields methods to use the string 'NULL', not null. diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 97e27b7d82..89b77d28b3 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -71,7 +71,7 @@ $wgConfigRegistry = [ * MediaWiki version number * @since 1.2 */ -$wgVersion = '1.31.0'; +$wgVersion = '1.31.1'; /** * Name of the site. It must be changed in LocalSettings.php -- 2.20.1