In the web installer, use secure session cookies

[lhc/web/wiklou.git] / RELEASE-NOTES-1.31

diff --git a/RELEASE-NOTES-1.31 b/RELEASE-NOTES-1.31
index 5d7f0c5..4351598 100644 (file)
--- a/RELEASE-NOTES-1.31
+++ b/RELEASE-NOTES-1.31
@@ -1,7 +1,13 @@
-== MediaWiki 1.31.8 ==
+== MediaWiki 1.31.9 ==
 
 THIS IS NOT A RELEASE YET
 
+=== Changes since MediaWiki 1.31.8 ===
+
+== MediaWiki 1.31.8 ==
+
+This is a security and maintenance release of the MediaWiki 1.31 branch.
+
 === Changes since MediaWiki 1.31.7 ===
 * (T199809) Don't invalidate BotPasswords if a password reset email is sent.
 * (T247017) PasswordReset performance improvements.
@@ -16,6 +22,8 @@ THIS IS NOT A RELEASE YET
 * (T206476) Call ob_start() before running tests.
 * (T234450) Per-user concurrency in SpecialContributions can now be limited by
   setting $wgPoolCounterConf['SpecialContributions'] appropriately.
+* (T248947) SECURITY: img_auth.php may leak private extension images into the
+  public cache.
 
 == MediaWiki 1.31.7 ==