MediaWiki 1.16.5

[autoinstallsdev/mediawiki.git] / RELEASE-NOTES

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 1a863b9fa9b4ecd56fc5dcd93f5b042a7f3d844b..ecfb4e2d875987d4a2250cfb4ece1f32fc3897e8 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -1,10 +1,10 @@
 = MediaWiki release notes =
 
-== MediaWiki 1.16.4 ==
+== MediaWiki 1.16.5 ==
 
-2011-04-14
+2011-05-05
 
-This is a security and maintenance release of the MediaWiki 1.16 branch.
+This is a security release of the MediaWiki 1.16 branch.
 
 === Summary of selected changes in 1.16 ===
 
@@ -44,6 +44,13 @@ set $wgCacheDirectory to a writable path on the local filesystem. Make sure
 you have the DBA extension for PHP installed, this will improve performance 
 further.
 
+== Changes since 1.16.4
+
+* (bug 28534) Fixed XSS vulnerability for IE 6 clients. This is the third 
+  attempt at fixing bug 28235.
+* (bug 28639) Fixed potential privilege escalation when $wgBlockDisablesLogin
+  is enabled.
+
 == Changes since 1.16.3 ==
 
 * (bug 28507) The change we made in 1.16.3 to fix bug 28235 (XSS for IE 6