<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
that means it's tagged as a security bug, have you tried asking
about it on #mediawiki on freenode?<br>
<br>
from the mailing lists, I see<br>
<br>
<font size="2" color="black" face="Verdana,Arial,Helvetica"><font
size="2" color="black" face="Verdana,Arial,Helvetica">George
Argyros and Aggelos Kiayias reported that the method used to
generate <br>
password reset tokens is not sufficiently secure. Instead we use
various <br>
more <br>
secure random number generators, depending on what is available
on the <br>
platform. Windows users are strongly advised to install either
the openssl <br>
extension or the mcrypt extension for PHP so that MediaWiki can
take <br>
advantage <br>
of the cryptographic random number facility provided by Windows.
<br>
<br>
Any extension developers using mt_rand() to generate random
numbers in <br>
contexts <br>
where security is required are encouraged to instead make use of
the <br>
MWCryptRand class introduced with this release. <br>
<br>
For more details, see <a
href="https://bugzilla.wikimedia.org/show_bug.cgi?id=35078"
rel="nofollow" target="_blank">https://bugzilla.wikimedia.org/show_bug.cgi?id=35078</a><br>
<br>
</font></font>and<br>
<font size="2" color="black" face="Verdana,Arial,Helvetica"><font
size="2" color="black" face="Verdana,Arial,Helvetica"><br>
<a class="moz-txt-link-freetext" href="http://www.mail-archive.com/wikibugs-l@lists.wikimedia.org/msg126907.html">http://www.mail-archive.com/wikibugs-l@lists.wikimedia.org/msg126907.html</a><br>
<br>
</font></font><br>
Regards,<br>
Snowolf<br>
<br>
On 2012-05-04 1152, Thorsten Glaser wrote:
<blockquote
cite="mid:alpine.DEB.2.02.1205041151541.10867@tglase.lan.tarent.de"
type="cite">
<pre wrap="">Hi,
just looked at this again, and I *still* do not have the
permissions to access the bug
<a class="moz-txt-link-freetext" href="https://bugzilla.wikimedia.org/show_bug.cgi?id=35078">https://bugzilla.wikimedia.org/show_bug.cgi?id=35078</a>
which is kinda hinderingâ¦
bye,
//mirabilos
</pre>
</blockquote>
</body>
</html>