{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "https://www.mediawiki.org/wiki/Release_notes/1.29#MediaWiki_1.29.3\n\n  - (T169545, CVE-2018-0503) SECURITY: $wgRateLimits entry for 'user' overrides  'newbie'.\n\n-    (T194605, CVE-2018-0505) SECURITY: BotPasswords can bypass CentralAuth's account lock.\n\n-    (T180551) Fix LanguageSrTest for language converter\n-    (T180552) Fix langauge converter parser test with self-close tags\n-    (T180537) Remove $wgAuth usage from wrapOldPasswords.php\n-    (T180485) InputBox: Have inputbox langconvert certain attributes\n-    (T161732, T181547) Upgraded Moment.js from v2.15.0 to v2.19.3.\n-    (T172927) Drop vendor from MW release branch\n-    (T87572) Make FormatMetadata::flattenArrayReal() work for an associative array\n-    Updated composer/spdx-licenses from 1.1.4 to 1.3.0 (development dependency).\n-    (T189567) the CLI installer (maintenance/install.php) learned to detect and include extensions. Pass --with-extensions to enable that feature.\n\n-    (T182381) Mask deprecated call in WatchedItemUnitTest\n-    (T190503) Let built-in web server (maintenance/dev) handle .php requests.\n-    The karma qunit tests would fail on some configuration due to headers already sent. Check headers_sent() before sending cpPosTime headers\n\n-    (T167507) selenium: Run Chrome headlessly.\n-   selenium: Pass -no-sandbox to Chrome under Docker\n-    (T191247) Use MediaWiki\\SuppressWarnings around trigger_error() instead @\n-    (T75174, T161041) Unit test ChangesListSpecialPageTest::testFilterUserExpLevel fails under SQLite.\n\n-    (T192584) Stop incorrectly passing USE INDEX to RecentChange::newFromConds().\n-    (T179190) selenium: Move test running logic from package.json to selenium.sh.\n-    (T117839, T193200) PDFHandler: Fix for pdfinfo changes in poppler-utils 0.48.\n-    Add default edit rate limit of 90 edits/minute for all users.\n-    (T196125) php-memcached 3.0 (provided with PHP 7.0) is now supported.\n-    (T196672) The mtime of extension.json files is now able to be zero\n-    (T180403) Validate $length in padleft/padright parser functions.\n-    (T143790) Make $wgEmailConfirmToEdit only affect edit actions.\n-    (T194237) Special:BotPasswords now requires reauthentication.\n-    (T191608, T187638) Add 'logid' parameter to Special:Log.\n-    (T176097) resourceloader: Disable a flaky MessageBlobStoreTest case\n-    (T193829) Indicate when a Bot Password needs reset.\n-    (T151415) Log email changes.\n-    (T118420) Unbreak Oracle installer.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-09-29 13:20:43", "date_modified": null, "date_approved": null, "date_testing": "2018-09-30 00:24:24", "date_stable": "2018-10-07 20:57:29", "alias": "FEDORA-2018-f4b65fc7cd", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-10-07 20:57:29", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2018-f4b65fc7cd", "title": "mediawiki-1.29.3-1.fc29", "version_hash": "f1bf156895c9c3a612bf03f2bac963f8bf65a2fd", "release": {"name": "F29", "long_name": "Fedora 29", "version": "29", "id_prefix": "FEDORA", "branch": "f29", "dist_tag": "f29", "stable_tag": "f29-updates", "testing_tag": "f29-updates-testing", "candidate_tag": "f29-updates-candidate", "pending_signing_tag": "f29-signing-pending", "pending_testing_tag": "f29-updates-testing-pending", "pending_stable_tag": "f29-updates-pending", "override_tag": "f29-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "mooninite", "email": "mike@cchtml.com", "id": 457, "avatar": "https://seccdn.libravatar.org/avatar/8b3c41993362b402769daf7b9e159cd28a40b2552f96c93bba03f32d4d68d127?s=24&d=retro", "openid": "mooninite.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by mooninite. ", "timestamp": "2018-09-29 13:20:43", "update_id": 123653, "user_id": 91, "id": 841339, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-09-30 00:25:56", "update_id": 123653, "user_id": 91, "id": 841529, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2018-10-07 06:00:36", "update_id": 123653, "user_id": 91, "id": 845044, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by mooninite. ", "timestamp": "2018-10-07 13:56:08", "update_id": 123653, "user_id": 91, "id": 845120, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by mooninite. ", "timestamp": "2018-10-07 13:56:14", "update_id": 123653, "user_id": 91, "id": 845121, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-10-07 21:01:04", "update_id": 123653, "user_id": 91, "id": 845243, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "mediawiki-1.29.3-1.fc29", "signed": true, "release_id": 23, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1634162, "title": "CVE-2018-0503 mediawiki: $wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie' [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 843548, "bug_id": 1634162, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-10-04 09:12:05", "update_id": 123654, "user_id": 2935, "id": 843548, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}]}, {"bug_id": 1634167, "title": "CVE-2018-0505 mediawiki: BotPassword can bypass CentralAuth's account lock [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 843548, "bug_id": 1634167, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-10-04 09:12:05", "update_id": 123654, "user_id": 2935, "id": 843548, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}]}, {"bug_id": 1634170, "title": "CVE-2018-0504 mediawiki: Information exposure when a log event is (partially) hidden [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 843548, "bug_id": 1634170, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-10-04 09:12:05", "update_id": 123654, "user_id": 2935, "id": 843548, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}]}], "updateid": "FEDORA-2018-f4b65fc7cd", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}