1.33.1 security release
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Jun 5 2019, 9:20 PM

Description

Previous work T205041: Tracking bug for 1.27.6/1.30.2/1.31.2/1.32.2 security release

Tracking bug for next security release

Maniphest ID	CVE ID	REL1_31	REL1_32	REL1_33	master
T230402	CVE-2019-16738	x	x	x	x

Related Objects
Search...

Status	Subtype	Assigned	Task
Resolved		Reedy	T225151 Release MediaWiki 1.31.4/1.32.4/1.33.1
Resolved		Reedy	T225152 Tracking bug for MediaWiki 1.31.4/1.32.4/1.33.1 security release
Resolved	Security	sbassett	T230402 Exposed suppressed username via Special:Redirect

Event Timeline

Reedy created this task.Jun 5 2019, 9:20 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 5 2019, 9:20 PM

Reedy renamed this task from Tracking bug for 1.31.3/1.32.3/1.33.1 security release to Tracking bug for MediaWiki 1.31.3/1.32.3/1.33.1 security release.Jun 5 2019, 9:24 PM

Reedy added a project: MediaWiki-Releasing.

Reedy renamed this task from Tracking bug for MediaWiki 1.31.3/1.32.3/1.33.1 security release to Tracking bug for MediaWiki 1.31.4/1.32.4/1.33.1 security release.Jul 2 2019, 2:57 PM

sbassett triaged this task as Medium priority.Aug 2 2019, 8:51 PM

sbassett updated the task description. (Show Details)Aug 2 2019, 8:56 PM

sbassett added a subtask: T229541: Javascript injection in edit summary on mobile site (CVE-2019-14807).Aug 2 2019, 8:58 PM

sbassett mentioned this in T229541: Javascript injection in edit summary on mobile site (CVE-2019-14807).Aug 2 2019, 9:08 PM

sbassett updated the task description. (Show Details)Aug 2 2019, 9:14 PM

sbassett removed a subtask: T229541: Javascript injection in edit summary on mobile site (CVE-2019-14807).

Reedy added a subtask: T232932: User content can redirect the logout button to different URL (CVE-2020-10959).Sep 14 2019, 9:22 PM

sbassett mentioned this in T230402: Exposed suppressed username via Special:Redirect.Sep 30 2019, 2:52 PM

Reedy closed this task as Resolved.Oct 7 2019, 6:49 PM

Reedy claimed this task.

Reedy removed a subtask: T232932: User content can redirect the logout button to different URL (CVE-2020-10959).

Reedy updated the task description. (Show Details)