Page MenuHomePhabricator

Obtain CVEs for 1.31.4/1.32.4/1.33.1 security releases
Closed, ResolvedPublic

Description

CVEs!

Event Timeline

Reedy renamed this task from Obtain CVEs for 1.31.3/1.32.3/1.33.1 security releases to Obtain CVEs for 1.31.4/1.32.4/1.33.1 security releases.Jul 2 2019, 2:58 PM

Do we want to get a CVE for T230402: Exposed suppressed username via Special:Redirect, @sbassett ?

As I think that's the only MW core security patch going into this release

@Reedy - we can. Probably should. You want me to request one? I probably have frequent flier status with Mitre now :)

sbassett triaged this task as Medium priority.Sep 23 2019, 2:20 PM
Reedy changed the visibility from "Custom Policy" to "Public (No Login Required)".Oct 7 2019, 6:59 PM
Reedy assigned this task to sbassett.