Platonides has uploaded a new change for review. https://gerrit.wikimedia.org/r/52159
Change subject: Add release notes for the two security bugs fixed in 1.20.3. ...................................................................... Add release notes for the two security bugs fixed in 1.20.3. Change-Id: I7366e1960c1c38998f812552ead5c6da269c88cd --- M RELEASE-NOTES-1.20 1 file changed, 2 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/mediawiki/core refs/changes/59/52159/1 diff --git a/RELEASE-NOTES-1.20 b/RELEASE-NOTES-1.20 index 1df20b5..70c9127 100644 --- a/RELEASE-NOTES-1.20 +++ b/RELEASE-NOTES-1.20 @@ -18,6 +18,8 @@ * (bug 44135) Fixed problems in CurlHttpRequest that caused InstantCommons to longer work by default. * (bug 44010) FauxRequest leaked cookie data from primary request. +* (bug 43518) API unblock leaked the full user object +* (bug 45355) Read of arbitrary files through mwdoc-filter.php == MediaWiki 1.20.2 == -- To view, visit https://gerrit.wikimedia.org/r/52159 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I7366e1960c1c38998f812552ead5c6da269c88cd Gerrit-PatchSet: 1 Gerrit-Project: mediawiki/core Gerrit-Branch: REL1_20 Gerrit-Owner: Platonides <[email protected]> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
