Maniphest T285405

Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Jun 23 2021, 5:25 PM

Project Tags

Referenced Files

None

Subscribers

Description

Previous work: T279726: Tracking bug for MediaWiki 1.31.15/1.35.3/1.36.1

Tracking bug for next security release, 1.31.16/1.35.4/1.36.2

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Reedy	T266419 Composer 2.0 updates and support
		Resolved		Reedy	T266421 Rebuild mediawiki-vendor on composer 2.0
		Resolved		Reedy	T275824 Bump wikimedia/composer-merge-plugin in vendor
		Resolved		tstarling	T248908 composer-merge-plugin support for composer 2.0
					Restricted Task
		Resolved		Jdforrester-WMF	T279857 Re-build CI containers with Composer 2.x
		Resolved		Jdforrester-WMF	T281294 Drop CI for REL1_31 branch once it's EOL
		Resolved		Aklapper	T230582 Archive Oracle Database project
		Resolved		Aklapper	T230583 Archive MSSQL project
		Resolved		Reedy	T279858 Formally EOL REL1_31
		Resolved		Reedy	T285404 Release MediaWiki 1.31.16/1.35.4/1.36.2
		Resolved		Reedy	T285405 Tracking bug for MediaWiki 1.31.16/1.35.4/1.36.2
		Resolved	Security	Zabe	T285515 CVE-2021-41798: XSS vulnerability in Special:Search
					Restricted Task
		Resolved	Security	RhinosF1	T279090 CVE-2021-41801: ReplaceText continues performing actions if the user no longer has the correct permission (such as by being blocked)
		Resolved	BUG REPORT	Ladsgroup	T290379 2021-09-04 enwiki was down at 10:44 (UTC)
					Restricted Task

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Jun 23 2021, 5:25 PM

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 23 2021, 5:25 PM

Reedy added a parent task: T285404: Release MediaWiki 1.31.16/1.35.4/1.36.2.Jun 23 2021, 5:25 PM

DannyS712 updated the task description. (Show Details)Jun 23 2021, 10:11 PM

sbassett added a subtask: T285515: CVE-2021-41798: XSS vulnerability in Special:Search.Jun 29 2021, 10:09 PM

Gehel closed subtask T285515: CVE-2021-41798: XSS vulnerability in Special:Search as Resolved.Jul 26 2021, 12:20 PM

sbassett triaged this task as Medium priority.Sep 7 2021, 2:16 PM

sbassett added a subtask: Restricted Task.

sbassett updated the task description. (Show Details)

Reedy closed subtask Restricted Task as Resolved.Sep 25 2021, 11:48 PM

I'm assuming T284419 isn't just a temporary patch for master?

Reedy changed the task status from Open to In Progress.Sep 29 2021, 2:56 PM

Reedy closed subtask Restricted Task as Resolved.

Reedy added a subtask: T279090: CVE-2021-41801: ReplaceText continues performing actions if the user no longer has the correct permission (such as by being blocked).Sep 30 2021, 5:02 PM

Reedy closed subtask T279090: CVE-2021-41801: ReplaceText continues performing actions if the user no longer has the correct permission (such as by being blocked) as Resolved.

Reedy closed this task as Resolved.Sep 30 2021, 6:24 PM

Reedy claimed this task.

Reedy added a subtask: T290379: 2021-09-04 enwiki was down at 10:44 (UTC).Sep 30 2021, 6:26 PM

Reedy updated the task description. (Show Details)Sep 30 2021, 6:36 PM

Reedy changed the visibility from "acl*security (Project)" to "Public (No Login Required)".

Reedy changed the edit policy from "acl*security (Project)" to "All Users".

DannyS712 mentioned this in T292227: Tracking bug for MediaWiki 1.35.5/1.36.3/1.37.1.Sep 30 2021, 7:16 PM