[TYPO3-dev] Why are several bugs not accessible on bugs.typo3.org?

[Xavier Perseguers]

Hi Alexander,

> last week, I wanted to understand a bugfix in TYPO3 4.4.1 which is described
> in the Changelog as follows:
>
> * Fixed bug #14412: Field value added to foreign_table_where by replacing ###REC_FIELD_THE_FIELD_NAME### is not quoted (thanks to Helmut Hummel and ### Xavier Perseguers)
>
> I don't understand this special english grammar so I wanted to read the bug #14412.

The special english grammar is that we use "Fixed bug #number: 
<description of the bug>" :-)

> But where is it? On bugs.typo3.org there is only a "Access Denied." if you
> search for it.

Security-related bugs are hidden from public view as long as they are 
not committed to some released version of TYPO3. But when they are 
included in an official release, I guess it should be made available.

Security team should think about it (possibly still hiding some notes?)

> Same happens with resolved bugs from the t3blog extension e.g. #12890

Same reason.

Regards
Xavier Perseguers