X-Git-Url: https://scripts.mit.edu/gitweb/autoinstallsdev/mediawiki.git/blobdiff_plain/2acc6b86c3191c408dc027d5164c397bea97d37b..refs/tags/mediawiki-1.16.2:/RELEASE-NOTES diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 4afdef47..71534ca4 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -1,8 +1,8 @@ = MediaWiki release notes = -== MediaWiki 1.16.1 == +== MediaWiki 1.16.2 == -2011-01-04 +2011-02-01 This is a security and maintenance release of the MediaWiki 1.16 branch. @@ -44,6 +44,16 @@ set $wgCacheDirectory to a writable path on the local filesystem. Make sure you have the DBA extension for PHP installed, this will improve performance further. +== Changes since 1.16.1 == + +* (bug 26642) Fixed incorrect translated namespace due to a regression in the + language converter. +* The interface translations were updated. +* (bug 27093, CVE-2011-0047): Fixed CSS injection vulnerability. +* (bug 27094) Fixed server-side arbitrary script inclusion vulnerability. + Affects Windows servers only. A malicious file with extension ".php" must + exist on the server for the exploit to be effective. + == Changes since 1.16.0 == * (bug 24981) Allow extensions to access SpecialUpload variables again