X-Git-Url: http://git.cyclocoop.org/?a=blobdiff_plain;f=RELEASE-NOTES-1.34;h=3597088498c532005c073106cf5bd95d931fb8da;hb=748c5eae2fd5d897c94c48771161c259941a7488;hp=7ec67176d72cf9d87e77e5aa8d7ae0f8e162d816;hpb=180e1b269fcff29fc1dd336a6217baca64d92bc3;p=lhc%2Fweb%2Fwiklou.git diff --git a/RELEASE-NOTES-1.34 b/RELEASE-NOTES-1.34 index 7ec67176d7..3597088498 100644 --- a/RELEASE-NOTES-1.34 +++ b/RELEASE-NOTES-1.34 @@ -2,7 +2,7 @@ == MediaWiki 1.34.1 == -THIS IS NOT A RELEASE YET +This is a security and maintenance release of the MediaWiki 1.34 branch. === Changes since MediaWiki 1.34.0 === * (T211450) User: better error message when getActorId fails. @@ -16,6 +16,13 @@ THIS IS NOT A RELEASE YET * Update comment about PHP versions supported by The PHP Group. * (T247215) Fix output of RecountCategories::doWork(). * Add check for page existence to view.php maintenance script. +* (T245149) Fix fetching login token from action=query&meta=tokens on private + wikis. +* (T236509) SECURITY: Fix HTML escaping in UserGroupMembership::getLink(). +* (T232932) SECURITY: User content can redirect the logout button to different + URL. +* (T246602) SECURITY: jquery.makeCollapsible allows applying event handler to + any CSS selector. == MediaWiki 1.34.0 ==