From: Kunal Mehta <legoktm@member.fsf.org>
Date: Mon, 3 Sep 2018 08:11:17 +0000 (-0700)
Subject: Bump 1.31.1
X-Git-Tag: 1.31.1
X-Git-Url: https://git.heureux-cyclage.org/?p=lhc%2Fweb%2Fwiklou.git;a=commitdiff_plain;h=52262ecf919e6aeb3565d816d6911368beed199f;hp=845dee9fa4331341fa6ef20d0fd8ffa73c7eb62e

Bump 1.31.1

Change-Id: I4f1dbc9ddf6daa9e67a08908d0c04db876493b84
---

diff --git a/RELEASE-NOTES-1.31 b/RELEASE-NOTES-1.31
index 3fd8dbcda1..b0da15a0df 100644
--- a/RELEASE-NOTES-1.31
+++ b/RELEASE-NOTES-1.31
@@ -1,10 +1,13 @@
 == MediaWiki 1.31.1 ==
 
-THIS IS NOT A RELEASE YET!
-
 This is a security and maintenance release of the MediaWiki 1.31 branch.
 
 === Changes since MediaWiki 1.31.0 ===
+* (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides
+  'newbie'.
+* (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's
+  account lock.
+* (T199029, CVE-2018-13258) SECURITY: Tarball was missing .htaccess files.
 * (T197229) Bundle Nuke extension, it was accidentally omitted.
 * (T193995) Fix undefined patchPath() method call in parser tests.
 * (T198687) Fix various selectFields methods to use the string 'NULL', not null.
diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 97e27b7d82..89b77d28b3 100644
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -71,7 +71,7 @@ $wgConfigRegistry = [
  * MediaWiki version number
  * @since 1.2
  */
-$wgVersion = '1.31.0';
+$wgVersion = '1.31.1';
 
 /**
  * Name of the site. It must be changed in LocalSettings.php