On Thu, 22 Mar 2012 13:21:16 -0700, Bináris <[email protected]> wrote:

I have a quite private 1.17 installation on my own computer, and I use it
alone with no access from internet. Am I right that it does not need to be
updated because of these bugs?


That Upload CSRF bug can be used against private wikis.

--
~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://daniel.friesen.name]

_______________________________________________
Wikitech-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to