Page MenuHomePhabricator
Create Task
Maniphest T325841

Obtain CVEs for 1.35.10/1.38.6/1.39.3 security releases
Closed, ResolvedPublic
Actions

Related Objects
Search...

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Dec 22 2022, 10:13 PM
Reedy subscribed.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 22 2022, 10:13 PM
Reedy added a parent task: T325839: Release MediaWiki 1.35.10/1.38.6/1.39.3.Dec 22 2022, 10:14 PM
Reedy renamed this task from Obtain CVEs for 1.35.10/1.38.6/1.39.2 security releases to Obtain CVEs for 1.35.10/1.38.6/1.39.3 security releases.Feb 21 2023, 4:06 PM
Reedy changed the task status from Open to In Progress.Mar 29 2023, 1:48 PM
Reedy claimed this task.

CVE's requested for T285159: CVE-2023-29141: X-Forwarded-For header allows brute-forcing autoblocked IP addresses and T285159: CVE-2023-29141: X-Forwarded-For header allows brute-forcing autoblocked IP addresses.

Reedy closed this task as Resolved.Apr 4 2023, 7:11 PM
Reedy changed the visibility from "acl*security (Project)" to "Public (No Login Required)".
Reedy changed the edit policy from "acl*security (Project)" to "All Users".
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits