Maniphest T248535

Tracking bug for MediaWiki 1.31.8/1.33.4/1.34.2
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Mar 26 2020, 12:34 AM

Tags

Referenced Files

None

Subscribers

Description

Previous work T240393: Tracking bug for MediaWiki 1.31.7/1.33.3/1.34.1

Tracking bug for next security release

Details

Due Date: Jun 30 2020, 11:00 AM

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Reedy	T248534 Release MediaWiki 1.31.8/1.33.4/1.34.2
		Resolved		Reedy	T248535 Tracking bug for MediaWiki 1.31.8/1.33.4/1.34.2
		Resolved	Security	tstarling	T248947 img_auth.php may leak private extension images into the public cache (CVE-2020-15005)

Event Timeline

Reedy created this task.Mar 26 2020, 12:34 AM

Reedy edited projects, added MediaWiki-Releasing; removed Security-Team.

Reedy changed the subtype of this task from "Security Issue" to "Task".Mar 26 2020, 12:40 AM

sbassett subscribed.Apr 23 2020, 2:45 AM

Reedy set Due Date to Jun 30 2020, 11:00 AM.Apr 23 2020, 2:57 AM

sbassett mentioned this in T249730: PRU: Display same informational message for all password resets & fix Manual:$wgRateLimits inconsistency [high priority; small].May 4 2020, 9:06 PM

Reedy added a subtask: T248947: img_auth.php may leak private extension images into the public cache (CVE-2020-15005).Jun 20 2020, 6:52 PM

Reedy changed the visibility from "Custom Policy" to "Public (No Login Required)".Jun 24 2020, 4:56 PM

Reedy changed the edit policy from "Custom Policy" to "All Users".

Reedy closed subtask T248947: img_auth.php may leak private extension images into the public cache (CVE-2020-15005) as Resolved.Jun 24 2020, 5:00 PM

Reedy closed this task as Resolved.Jun 24 2020, 5:18 PM

Reedy claimed this task.

DannyS712 subscribed.Jun 24 2020, 5:35 PM

sbassett mentioned this in T256335: Tracking bug for MediaWiki 1.31.9/1.34.3/1.35.0.Jun 26 2020, 6:58 PM