it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Gergo Tisza <gtisza AT wikimedia.org>
- To: mediawiki-announce AT lists.wikimedia.org
- Subject: [IT-SecNots] [MediaWiki-announce] OAuth security update #2
- Date: Thu, 27 Oct 2016 17:09:06 -0700
- Authentication-results: mail.intern.piratenpartei.de (MFA); dkim=pass (1024-bit key) header.d=lists.wikimedia.org header.b=E6lhh+rb; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=wikimedia.org header.b=O6EgUF2P
- List-archive: <https://lists.wikimedia.org/pipermail/mediawiki-announce/>
- List-id: MediaWiki update and security announcements list <mediawiki-announce.lists.wikimedia.org>
The recent OAuth security fix [1] had a bug [2] which caused some
legitimate OAuth requests to be rejected. The affected versions have been
updated to work properly. Apologies for the disruption.
Gergő
https://www.mediawiki.org/wiki/User:Tgr_(WMF)
[1]
https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-October/000197.html
[2] https://phabricator.wikimedia.org/T149194
_______________________________________________
MediaWiki announcements mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce
- [IT-SecNots] [MediaWiki-announce] OAuth security update #2, Gergo Tisza, 28.10.2016
Archiv bereitgestellt durch MHonArc 2.6.19.