Page MenuHomePhabricator
Create Task
Maniphest T285404

Release MediaWiki 1.31.16/1.35.4/1.36.2
Closed, ResolvedPublic
Actions

Description

Previous release work: T279725: Release MediaWiki 1.31.15/1.35.3/1.36.1

Tracking for activities actually pertaining to making the release of MediaWiki 1.31.16/1.35.4/1.36.2

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedReedyT266419 Composer 2.0 updates and support
 ResolvedReedyT266421 Rebuild mediawiki-vendor on composer 2.0
 ResolvedReedyT275824 Bump wikimedia/composer-merge-plugin in vendor
 ResolvedtstarlingT248908 composer-merge-plugin support for composer 2.0
Restricted Task
 ResolvedJdforrester-WMFT279857 Re-build CI containers with Composer 2.x
 ResolvedJdforrester-WMFT281294 Drop CI for REL1_31 branch once it's EOL
 ResolvedAklapperT230582 Archive Oracle Database project
 ResolvedAklapperT230583 Archive MSSQL project
 ResolvedReedyT279858 Formally EOL REL1_31
 ResolvedReedyT285404 Release MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285405 Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedSecurityZabeT285515 CVE-2021-41798: XSS vulnerability in Special:Search
Restricted Task
 ResolvedBUG REPORTLadsgroupT290379 2021-09-04 enwiki was down at 10:44 (UTC)
Restricted Task
Restricted Task
 ResolvedReedyT285407 Write and send pre-release announcements for MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285408 Write and send release announcements for MediaWiki 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285409 Tag 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285410 Update onwiki news and Module:Version
 ResolvedReedyT285411 Update onwiki release notes for 1.31.16/1.35.4/1.36.2
 ResolvedReedyT285412 Update Wikidata Q83
 ResolvedReedyT285413 Update HISTORY in master after 1.31.16/1.35.4/1.36.2
 ResolvedMstylesT285414 Write and send supplementary release announcement for extensions and skins with security patches (1.31.16/1.35.4/1.36.2)
 ResolvedSecuritysbassettT286376 Add DataDump CVE-2021-32774 to extensions security announcement
 ResolvedSecurityRhinosF1T279090 CVE-2021-41801: ReplaceText continues performing actions if the user no longer has the correct permission (such as by being blocked)
Restricted Task
 ResolvedSecurityLegoktmT289385 Modified HTTP headers allow XSS in SecurePoll (CVE-2021-42045)
 ResolvedSecurityDannyS712T286385 XSS in GlobalWatchlist (CVE-2021-42046)
 ResolvedSecurityUrbanecm_WMFT289063 Mentor dashboard: Permanent XSS exploitable by wiki admins (server-side part) (CVE-2021-42047)
 ResolvedSecurity• mewophT289064 Newcomer homepage Impact module: Permanent XSS exploitable by admins for new accounts (CVE-2021-42048)
 ResolvedSecurityUrbanecm_WMFT289408 Mentor dashboard: Permanent XSS exploitable by wiki admins (client-side part) (CVE-2021-42044)
 ResolvedSecurityUrbanecm_WMFT290692 Permanent XSS exploitable by wiki admins in SpecialEditGrowthConfig (CVE-2021-42042)
 ResolvedSecurityTheVoidwalkerT287347 Loops can cause php-fpm exhaustion (CVE-2021-42040)

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Jun 23 2021, 5:25 PM
Reedy subscribed.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 23 2021, 5:25 PM
Reedy added subtasks: T285405: Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2, Restricted Task, T285407: Write and send pre-release announcements for MediaWiki 1.31.16/1.35.4/1.36.2, T285408: Write and send release announcements for MediaWiki 1.31.16/1.35.4/1.36.2, T285409: Tag 1.31.16/1.35.4/1.36.2, T285410: Update onwiki news and Module:Version, T285411: Update onwiki release notes for 1.31.16/1.35.4/1.36.2, T285412: Update Wikidata Q83, T285413: Update HISTORY in master after 1.31.16/1.35.4/1.36.2, T285414: Write and send supplementary release announcement for extensions and skins with security patches (1.31.16/1.35.4/1.36.2).Jun 23 2021, 5:25 PM
DannyS712 updated the task description. (Show Details)Jun 23 2021, 10:11 PM
Reedy added a subtask: T279858: Formally EOL REL1_31.Sep 29 2021, 1:15 AM
Reedy removed a subtask: T279858: Formally EOL REL1_31.Sep 29 2021, 1:17 AM
Reedy added a parent task: T279858: Formally EOL REL1_31.
Reedy closed subtask T285407: Write and send pre-release announcements for MediaWiki 1.31.16/1.35.4/1.36.2 as Resolved.Sep 29 2021, 2:49 PM
Reedy changed the task status from Open to In Progress.Sep 29 2021, 2:55 PM
Reedy changed the status of subtask T285408: Write and send release announcements for MediaWiki 1.31.16/1.35.4/1.36.2 from Open to In Progress.
Reedy changed the status of subtask T285405: Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2 from Open to In Progress.
Reedy changed the status of subtask Restricted Task from Open to In Progress.
Reedy closed subtask Restricted Task as Resolved.Sep 30 2021, 2:09 PM
Reedy closed subtask T285408: Write and send release announcements for MediaWiki 1.31.16/1.35.4/1.36.2 as Resolved.Sep 30 2021, 5:48 PM
Reedy closed subtask T285412: Update Wikidata Q83 as Resolved.
Reedy closed subtask T285410: Update onwiki news and Module:Version as Resolved.Sep 30 2021, 5:55 PM
Reedy closed subtask T285405: Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2 as Resolved.Sep 30 2021, 6:24 PM
Reedy triaged this task as Medium priority.Sep 30 2021, 6:34 PM
Reedy closed subtask T285409: Tag 1.31.16/1.35.4/1.36.2 as Resolved.
Reedy closed subtask T285411: Update onwiki release notes for 1.31.16/1.35.4/1.36.2 as Resolved.Sep 30 2021, 6:43 PM
DannyS712 mentioned this in T292226: Release MediaWiki 1.35.5/1.36.3/1.37.1.Sep 30 2021, 7:16 PM
sbassett mentioned this in T285414: Write and send supplementary release announcement for extensions and skins with security patches (1.31.16/1.35.4/1.36.2).Sep 30 2021, 8:35 PM
Reedy changed the status of subtask T285413: Update HISTORY in master after 1.31.16/1.35.4/1.36.2 from Open to In Progress.Sep 30 2021, 9:37 PM
Reedy closed subtask T285413: Update HISTORY in master after 1.31.16/1.35.4/1.36.2 as Resolved.Sep 30 2021, 11:36 PM
sbassett closed subtask T285414: Write and send supplementary release announcement for extensions and skins with security patches (1.31.16/1.35.4/1.36.2) as Resolved.Oct 7 2021, 9:07 PM
Reedy closed this task as Resolved.Oct 7 2021, 9:19 PM
Reedy claimed this task.
Reedy changed the visibility from "acl*security (Project)" to "Public (No Login Required)".
Reedy changed the edit policy from "acl*security (Project)" to "All Users".
sbassett mentioned this in T293341: MassEditRegex is Vulnerable to CSRF Attacks (CVE-2021-46147).Oct 14 2021, 3:57 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL