Maniphest T240392

Release MediaWiki 1.31.7/1.33.3/1.34.1
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Dec 10 2019, 10:50 PM

Tags

Referenced Files

None

Subscribers

Jdforrester-WMF

Description

Previous release work: T233494: Release MediaWiki 1.31.6/1.32.6/1.33.2/1.34.0

Tracking for activities actually pertaining to making the release of MediaWiki 1.31.7/1.33.3/1.34.1

1.32.7 won't exist - T242981

Details

Due Date: Mar 26 2020, 12:00 PM

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Reedy	T240392 Release MediaWiki 1.31.7/1.33.3/1.34.1
		Resolved		Reedy	T240393 Tracking bug for MediaWiki 1.31.7/1.33.3/1.34.1
		Resolved		sbassett	T232932 User content can redirect the logout button to different URL (CVE-2020-10959)
		Resolved	Security	sbassett	T246602 makeCollapsible allows applying event handler to any CSS selector (CVE-2020-10960)
		Resolved		Reedy	T240394 Write and send pre-release announcements for MediaWiki 1.31.7/1.33.3/1.34.1
		Resolved		Reedy	T240395 Write and send release announcements for MediaWiki 1.31.7/1.33.3/1.34.1
		Resolved		Reedy	T240396 Update onwiki release notes for 1.31.7/1.33.3/1.34.1
		Resolved		Reedy	T240397 Update HISTORY in master after 1.31.7/1.33.3/1.34.1
		Resolved		Reedy	T240398 Tag 1.31.7/1.33.3/1.34.1
		Resolved		sbassett	T240399 Obtain CVEs for 1.31.7/1.33.3/1.34.1 security releases
		Resolved		sbassett	T240400 Write and send supplementary release announcement for extensions and skins with security patches (MediaWiki 1.31.7/1.33.3/1.34.1)
		Resolved		Urbanecm	T229731 Global blocks: if an IP is within two ranges and one is locally disabled, GlobalBlock won't listen to the other one (CVE-2020-10534)
		Resolved		• nray	T240502 Raw HTML in MobileFrontend
		Resolved		matthiasmullie	T240773 Exposed HTML in WikibaseMediaInfo autocomplete suggestions (CVE-2020-6163)
		Resolved	Security	Alexia	T245850 Invoking any namespaced page with {{#widget:}} will run the page's contents as a widget; even if the page is not in Widget namespace (CVE-2020-9382)

Event Timeline

Reedy created this task.Dec 10 2019, 10:50 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 10 2019, 10:50 PM

Reedy added a project: MediaWiki-Releasing.Dec 10 2019, 10:51 PM

Reedy triaged this task as Medium priority.Dec 18 2019, 4:33 PM

Reedy set Due Date to Jan 30 2020, 12:00 PM.Jan 16 2020, 3:54 PM

Reedy renamed this task from Release MediaWiki 1.31.7/1.32.7/1.33.3/1.34.1 to Release MediaWiki 1.31.7/1.33.3/1.34.1.Jan 23 2020, 1:09 PM

Reedy updated the task description. (Show Details)

Reedy updated the task description. (Show Details)

T242981: Formally EOL MediaWiki 1.32 makes 1.32.7 not going to happen :)

• chasemp added a project: Security.Feb 10 2020, 10:56 PM

sbassett mentioned this in T243608: User scripts shouldn't run on Special:Manage_Two-factor_authentication.Feb 13 2020, 8:41 PM

sbassett added a subscriber: DannyS712.Feb 13 2020, 8:59 PM

sbassett subscribed.

• chasemp removed a project: acl*security.Feb 20 2020, 8:06 PM

sbassett mentioned this in T236509: XSS on Special:UserRights.Mar 5 2020, 11:03 PM

Reedy changed Due Date from Jan 30 2020, 12:00 PM to Mar 26 2020, 12:00 PM.Mar 10 2020, 2:14 PM

Jdforrester-WMF subscribed.Mar 12 2020, 11:36 PM

Reedy closed subtask T240394: Write and send pre-release announcements for MediaWiki 1.31.7/1.33.3/1.34.1 as Resolved.Mar 25 2020, 7:24 PM

Reedy mentioned this in T248534: Release MediaWiki 1.31.8/1.33.4/1.34.2.Mar 26 2020, 12:33 AM

sbassett closed subtask T240399: Obtain CVEs for 1.31.7/1.33.3/1.34.1 security releases as Resolved.Mar 26 2020, 3:42 AM

Reedy closed subtask T240395: Write and send release announcements for MediaWiki 1.31.7/1.33.3/1.34.1 as Resolved.Mar 26 2020, 5:34 PM

Reedy closed subtask T240393: Tracking bug for MediaWiki 1.31.7/1.33.3/1.34.1 as Resolved.Mar 26 2020, 5:41 PM

Reedy changed the visibility from "Custom Policy" to "Public (No Login Required)".

Reedy closed subtask T240398: Tag 1.31.7/1.33.3/1.34.1 as Resolved.Mar 26 2020, 6:07 PM

Reedy closed subtask T240396: Update onwiki release notes for 1.31.7/1.33.3/1.34.1 as Resolved.Mar 26 2020, 6:28 PM

Reedy closed subtask T240397: Update HISTORY in master after 1.31.7/1.33.3/1.34.1 as Resolved.Mar 26 2020, 7:00 PM

sbassett closed subtask T240400: Write and send supplementary release announcement for extensions and skins with security patches (MediaWiki 1.31.7/1.33.3/1.34.1) as Resolved.Mar 26 2020, 8:43 PM

Reedy closed this task as Resolved.Mar 26 2020, 10:02 PM

Reedy claimed this task.