summaryrefslogtreecommitdiff
path: root/RELEASE-NOTES-1.26
diff options
context:
space:
mode:
Diffstat (limited to 'RELEASE-NOTES-1.26')
-rw-r--r--RELEASE-NOTES-1.269
1 files changed, 8 insertions, 1 deletions
diff --git a/RELEASE-NOTES-1.26 b/RELEASE-NOTES-1.26
index 0adfbe20..e617f00b 100644
--- a/RELEASE-NOTES-1.26
+++ b/RELEASE-NOTES-1.26
@@ -1,6 +1,13 @@
Security reminder: If you have PHP's register_globals option set, you must
turn it off. MediaWiki will not work with it enabled.
+== MediaWiki 1.26.2 ==
+
+This is a maintenance release of the MediaWiki 1.26 branch.
+
+== Changes since 1.26.1 ==
+* (T121892) Fix fatal error on some Special pages, introduced in 1.26.1.
+
== MediaWiki 1.26.1 ==
This is a maintenance release of the MediaWiki 1.26 branch.
@@ -11,7 +18,7 @@ This is a maintenance release of the MediaWiki 1.26 branch.
Configuration values such as "http://my.wiki.com/wiki/$1" are fine, as are
"/wiki/$1". A value such as "$1" or "wiki/$1" is not and will now throw an
error.
-* (T119309) SECURITY: Use hash_equals() for edit token comparison
+* (T119309) SECURITY: Use hash_compare() for edit token comparison
* (T118032) SECURITY: Don't allow cURL to interpret POST parameters starting
with '@' as file uploads
* (T115522) SECURITY: Passwords generated by User::randomPassword() can no