$wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie'

PKSA-zbzt-cmt6-4sc8 CVE-2018-0503

Affected package: mediawiki/core

Affected version: >=1.27.0,<1.27.5|>=1.29.0,<1.29.3|>=1.30.0,<1.30.1|>=1.31.0,<1.31.1

Reported by:
FriendsOfPHP/security-advisories