Maniphest T263802

Release MediaWiki 1.31.11/1.35.1
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Sep 24 2020, 11:28 PM

Tags

Referenced Files

None

Subscribers

Jdforrester-WMF

Description

Previous release work: T256334: Release MediaWiki 1.31.9/1.34.3/1.35.0

Tracking for activities actually pertaining to making the release of MediaWiki 1.31.11/1.35.1

Details

Due Date: Dec 17 2020, 11:59 PM

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Reedy	T263802 Release MediaWiki 1.31.11/1.35.1
		Resolved		Reedy	T263803 Tracking bug for MediaWiki 1.31.11/1.35.1
		Resolved	Security	DannyS712	T205908 Unable to change visibility of log entries when MediaWiki:Mainpage uses Special:MyLanguage (CVE-2020-35477)
					Restricted Task
		Resolved	Security	Umherirrender	T268894 Message recentchanges-legend-watchlistexpiry can contain raw html (CVE-2020-35474)
		Resolved	Security	Umherirrender	T268917 Messages userrights-expiry-current and userrights-expiry-none can contain raw html (CVE-2020-35475)
		Resolved	Security	Umherirrender	T268938 BlockLogFormatter can output raw html (CVE-2020-35478, CVE-2020-35479)
		Resolved		Reedy	T263804 Write and send pre-release announcements for MediaWiki 1.31.11/1.35.1
		Resolved		Reedy	T263805 Write and send release announcements for MediaWiki 1.31.11/1.35.1
		Resolved		Reedy	T263806 Update onwiki release notes for 1.31.11/1.35.1
		Resolved		Reedy	T263807 Update HISTORY in master after 1.31.11/1.35.1
		Resolved		Reedy	T263808 Tag 1.31.11/1.35.1
		Resolved		Reedy	T263809 Obtain CVEs for 1.31.11/1.35.1 security releases
		Resolved		sbassett	T263810 Write and send supplementary release announcement for extensions and skins with security patches (1.31.11/1.35.1)

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Sep 24 2020, 11:28 PM

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 24 2020, 11:28 PM

Reedy added subtasks: T263803: Tracking bug for MediaWiki 1.31.11/1.35.1, T263804: Write and send pre-release announcements for MediaWiki 1.31.11/1.35.1, T263805: Write and send release announcements for MediaWiki 1.31.11/1.35.1, T263806: Update onwiki release notes for 1.31.11/1.35.1, T263807: Update HISTORY in master after 1.31.11/1.35.1, T263808: Tag 1.31.11/1.35.1, T263809: Obtain CVEs for 1.31.11/1.35.1 security releases, T263810: Write and send supplementary release announcement for extensions and skins with security patches (1.31.11/1.35.1).Sep 24 2020, 11:29 PM

Jdforrester-WMF subscribed.Sep 28 2020, 4:16 PM

sbassett subscribed.Oct 19 2020, 4:14 PM

Reedy renamed this task from Release MediaWiki 1.31.11/1.34.5/1.35.1 to Release MediaWiki 1.31.11/1.35.1.Nov 29 2020, 1:39 AM

Reedy updated the task description. (Show Details)

Reedy set Due Date to Dec 17 2020, 11:59 PM.

sbassett mentioned this in T263498: Logins to MW with at least one SSO client extension allows masquerading as another user (CVE-2020-35623).Dec 8 2020, 9:50 PM

Reedy updated the task description. (Show Details)Dec 15 2020, 1:04 PM

Reedy closed subtask T263809: Obtain CVEs for 1.31.11/1.35.1 security releases as Resolved.Dec 16 2020, 8:00 PM

Reedy closed subtask T263804: Write and send pre-release announcements for MediaWiki 1.31.11/1.35.1 as Resolved.Dec 16 2020, 8:41 PM

Reedy closed subtask T263805: Write and send release announcements for MediaWiki 1.31.11/1.35.1 as Resolved.Dec 17 2020, 11:50 PM

Reedy changed the visibility from "acl*security (Project)" to "Public (No Login Required)".Dec 18 2020, 12:26 AM

Reedy changed the edit policy from "acl*security (Project)" to "All Users".

Reedy closed subtask T263808: Tag 1.31.11/1.35.1 as Resolved.Dec 18 2020, 12:32 AM

Reedy closed subtask T263807: Update HISTORY in master after 1.31.11/1.35.1 as Resolved.Dec 18 2020, 3:16 AM

Reedy closed subtask T263806: Update onwiki release notes for 1.31.11/1.35.1 as Resolved.

Reedy closed subtask T263803: Tracking bug for MediaWiki 1.31.11/1.35.1 as Resolved.Dec 18 2020, 3:18 AM

DannyS712 mentioned this in T270458: Release MediaWiki 1.31.13/1.35.2.Dec 18 2020, 3:19 AM

Is there a MediaWiki Extensions Security Release Supplement for this release?

In T263802#6703080, @Prod wrote:

Is there a MediaWiki Extensions Security Release Supplement for this release?

There will be - T263810: Write and send supplementary release announcement for extensions and skins with security patches (1.31.11/1.35.1) is still private since it hasn't been resolved yet

In T263802#6703080, @Prod wrote:

Is there a MediaWiki Extensions Security Release Supplement for this release?

It will be released by this Wednesday (2020-12-23) at the latest. Thanks for your patience.

sbassett closed subtask T263810: Write and send supplementary release announcement for extensions and skins with security patches (1.31.11/1.35.1) as Resolved.Dec 22 2020, 9:58 PM

Prod unsubscribed.Jan 14 2021, 3:59 AM

This happened I think