T260485: CentralAuth uses wrong actor ID when locally suppressing the user (CVE-2020-25869)
From cpt
| Phabricator Link | T260485 |
|---|---|
| Status | resolved |
| Priority | High (red) |
| Points | |
| Phabricator Task Created | 2020/08/15 06:13 PM |
| Wiki Page Created | 2020/11/12 11:22 PM |
| Phabricator Task Last Modified | 2021/03/17 02:46 PM |
| Wiki Page Last Updated | 2021/11/16 03:35 PM |
| Phabricator Task Closed | 2020/11/12 09:26 PM |
| Authored By | Urbanecm |
| Assigned To | daniel (Daniel Kinzler) |
| Projects |
|
| Platform Engineering Initiative Column | |
| Platform Team Workboards Column | |
| Subtasks | |
| Parent Tasks |
Column Transitions: (Added project: ⇑, Removed project: ⇓,Entered column: ⇒, Exited column: ⇐)
| Project | Column | Date |
|---|---|---|
| ⇑ Security-Team | 15 August 2020 | |
| ⇑ Security | 15 August 2020 | |
| ⇑ MediaWiki-extensions-CentralAuth | 15 August 2020 | |
| ⇑ MediaWiki-Blocks | 15 August 2020 | |
| ⇑ Anti-Harassment | 15 August 2020 | |
| ⇑ Platform Engineering | 15 August 2020 | |
| ⇑ MediaWiki-User-management | 15 August 2020 | |
| Security-Team | ⇐ Incoming | 17 August 2020 |
| Security-Team | ⇒ Watching | 17 August 2020 |
| ⇑ DBA | 17 August 2020 | |
| DBA | ⇐ Triage | 18 August 2020 |
| DBA | ⇒ Done | 18 August 2020 |
| ⇑ Patch-For-Review | 18 August 2020 | |
| ⇓ Patch-For-Review | 18 August 2020 | |
| ⇓ Anti-Harassment | 18 August 2020 | |
| ⇑ Anti-Harassment (The Letter Song) | 18 August 2020 | |
| ⇓ Platform Engineering | 18 August 2020 | |
| ⇑ Platform Team Workboards (Clinic Duty Team) | 18 August 2020 | |
| Platform Team Workboards (Clinic Duty Team) | ⇐ Inbox | 18 August 2020 |
| Platform Team Workboards (Clinic Duty Team) | ⇒ Ready (WIP:5) | 18 August 2020 |
| Anti-Harassment (The Letter Song) | ⇐ Ready 🎬 (ONLY IF YOU HAVE NO MORE CODE TO REVIEW) | 18 August 2020 |
| Anti-Harassment (The Letter Song) | ⇒ Ready 🎬 (ONLY IF YOU HAVE NO MORE CODE TO REVIEW) | 18 August 2020 |
| ⇓ Anti-Harassment (The Letter Song) | 19 August 2020 | |
| ⇑ Anti-Harassment | 19 August 2020 | |
| ⇑ MW-1.35-release | 24 August 2020 | |
| ⇓ Platform Team Workboards (Clinic Duty Team) | 24 August 2020 | |
| ⇑ Platform Engineering | 24 August 2020 | |
| ⇑ User-Urbanecm | 24 August 2020 | |
| Platform Engineering | ⇐ Inbox | 25 August 2020 |
| Platform Engineering | ⇒ Inbox | 25 August 2020 |
| ⇓ Platform Engineering | 25 August 2020 | |
| ⇑ Platform Team Workboards (Clinic Duty Team) | 25 August 2020 | |
| MW-1.35-release | ⇐ Blocker | 26 August 2020 |
| MW-1.35-release | ⇒ Not a blocker | 26 August 2020 |
| ⇓ Platform Team Workboards (Clinic Duty Team) | 26 August 2020 | |
| ⇑ Platform Team Workboards (Clinic Duty Team) | 31 August 2020 | |
| Platform Team Workboards (Clinic Duty Team) | ⇐ Ready (WIP:5) | 1 September 2020 |
| Platform Team Workboards (Clinic Duty Team) | ⇒ Doing(WIP:5) | 1 September 2020 |
| ⇓ Platform Team Workboards (Clinic Duty Team) | 2 September 2020 | |
| ⇑ Platform Engineering | 2 September 2020 | |
| Platform Engineering | ⇐ Inbox | 2 September 2020 |
| Platform Engineering | ⇒ Tracking/Watching | 2 September 2020 |
| User-Urbanecm | ⇐ Backlog | 5 September 2020 |
| User-Urbanecm | ⇒ Analytics/Under discussion | 5 September 2020 |
| ⇑ MW-1.34-notes | 28 September 2020 | |
| ⇑ MW-1.35-notes | 28 September 2020 | |
| ⇑ MW-1.31-release-notes | 28 September 2020 | |
| ⇓ DBA | 19 October 2020 | |
| ⇑ MW-1.36-notes (1.36.0-wmf.18; 2020-11-17) | 16 November 2020 |
