Per https://github.com/miraheze/DataDump/commit/67a82b76e186925330b89ace9c5fd893a300830b a d report by @R4356th, please add DataDump (CVE-2021-32774, will add when given by GHSA team) to the next extensions & skins security announcement. (If GHSA is fully public then)
https://github.com/miraheze/DataDump/security/advisories/GHSA-29mh-4vhv-x8mr
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Reedy | T266419 Composer 2.0 updates and support | |||
| Resolved | Reedy | T266421 Rebuild mediawiki-vendor on composer 2.0 | |||
| Resolved | Reedy | T275824 Bump wikimedia/composer-merge-plugin in vendor | |||
| Resolved | tstarling | T248908 composer-merge-plugin support for composer 2.0 | |||
| Restricted Task | |||||
| Resolved | Jdforrester-WMF | T279857 Re-build CI containers with Composer 2.x | |||
| Resolved | Jdforrester-WMF | T281294 Drop CI for REL1_31 branch once it's EOL | |||
| Resolved | Aklapper | T230582 Archive Oracle Database project | |||
| Resolved | Aklapper | T230583 Archive MSSQL project | |||
| Resolved | Reedy | T279858 Formally EOL REL1_31 | |||
| Resolved | Reedy | T285404 Release MediaWiki 1.31.16/1.35.4/1.36.2 | |||
| Resolved | Mstyles | T285414 Write and send supplementary release announcement for extensions and skins with security patches (1.31.16/1.35.4/1.36.2) | |||
| Resolved | Security | sbassett | T286376 Add DataDump CVE-2021-32774 to extensions security announcement |