Previous work: T256335: Tracking bug for MediaWiki 1.31.9/1.34.3/1.35.0
Tracking bug for next security release, 1.31.11/1.35.1
Description
Description
Details
Details
- Due Date
- Dec 17 2020, 11:59 PM
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Reedy | T263802 Release MediaWiki 1.31.11/1.35.1 | |||
| Resolved | Reedy | T263803 Tracking bug for MediaWiki 1.31.11/1.35.1 | |||
| Resolved | Security | DannyS712 | T205908 Unable to change visibility of log entries when MediaWiki:Mainpage uses Special:MyLanguage (CVE-2020-35477) | ||
| Restricted Task | |||||
| Resolved | Security | Umherirrender | T268894 Message recentchanges-legend-watchlistexpiry can contain raw html (CVE-2020-35474) | ||
| Resolved | Security | Umherirrender | T268917 Messages userrights-expiry-current and userrights-expiry-none can contain raw html (CVE-2020-35475) | ||
| Resolved | Security | Umherirrender | T268938 BlockLogFormatter can output raw html (CVE-2020-35478, CVE-2020-35479) |
Event Timeline
Comment Actions
@Reedy can T120883 be included in the release? At least up through patch v8 (v9 isn't deployed yet on WMF wikis)
Comment Actions
Maybe. The fact it's upto v8 already, and there's a v9... It doesn't seem the most stable, and it has caused at least some breakages already.
Comment Actions
Its just that I keep discovering more divergent behavior, and am reusing the same task
Comment Actions
You don't really need to keep amending the same patch, unless you're fixing further issues in the same code you've already fixed