VOOZH about

URL: https://phabricator.wikimedia.org/T225160

⇱ ⚓ T225160 Obtain CVEs for 1.31.4/1.32.4/1.33.1 security releases


Maniphest T225160

Obtain CVEs for 1.31.4/1.32.4/1.33.1 security releases
Closed, ResolvedPublic

Description

CVEs!

Event Timeline

Reedy renamed this task from Obtain CVEs for 1.31.3/1.32.3/1.33.1 security releases to Obtain CVEs for 1.31.4/1.32.4/1.33.1 security releases.Jul 2 2019, 2:58 PM
Comment Actions

Do we want to get a CVE for T230402: Exposed suppressed username via Special:Redirect, @sbassett ?

As I think that's the only MW core security patch going into this release

Comment Actions

@Reedy - we can. Probably should. You want me to request one? I probably have frequent flier status with Mitre now :)

sbassett triaged this task as Medium priority.Sep 23 2019, 2:20 PM
Reedy changed the visibility from "Custom Policy" to "Public (No Login Required)".Oct 7 2019, 6:59 PM
Reedy assigned this task to sbassett.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits