1.39.3
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Dec 22 2022, 10:13 PM

Description

Previous release work: {T318964}

Tracking for activities actually pertaining to making the release of MediaWiki 1.35.10/1.38.6/1.39.3

Related Objects
Search...

Status	Subtype	Assigned	Task
Resolved		Reedy	T325839 Release MediaWiki 1.35.10/1.38.6/1.39.3
Resolved		Reedy	T325840 Tracking bug for MediaWiki 1.35.10/1.38.6/1.39.3
Resolved	Security	None	T285159 CVE-2023-29141: X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Resolved	Security	Esanders	T326946 CVE-2020-36649: Bundled PapaParse copy in VisualEditor has known ReDos
Resolved	Security	Reedy	T330086 CVE-2023-29142: OATHAuth allows replay attacks when MediaWiki is configured without ObjectCache; Insecure Default Configuration
Resolved		Reedy	T325841 Obtain CVEs for 1.35.10/1.38.6/1.39.3 security releases
Resolved		Reedy	T325842 Write and send pre-release announcements for MediaWiki 1.35.10/1.38.6/1.39.3
Resolved		Reedy	T325843 Write and send release announcements for MediaWiki 1.35.10/1.38.6/1.39.3
Resolved		Reedy	T325844 Tag 1.35.10/1.38.6/1.39.3
Resolved		Reedy	T325845 Update onwiki news and Module:Version
Resolved		Reedy	T325846 Update onwiki release notes for 1.35.10/1.38.6/1.39.3
Resolved		Reedy	T325847 Update Wikidata Q83
Resolved		Reedy	T325848 Update HISTORY in master after 1.35.10/1.38.6/1.39.3
Resolved		None	T325849 Write and send supplementary release announcement for extensions and skins with security patches (1.35.10/1.38.6/1.39.3)

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Dec 22 2022, 10:13 PM

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 22 2022, 10:13 PM

DannyS712 updated the task description. (Show Details)Dec 23 2022, 1:32 AM

sbassett changed the status of subtask T325849: Write and send supplementary release announcement for extensions and skins with security patches (1.35.10/1.38.6/1.39.3) from Open to In Progress.Jan 5 2023, 5:22 PM

Would it be possible to expedite 1.39.2? T326071: Upgrade from 1.31.2 to 1.39 results in pages no longer being usable with "The revision #0 of the page named "x" does not exist." error is pretty bad as far as MediaWiki bugs go: upgrading from 1.32 or older to 1.39 results in loss of all user data in the revision table, and all pages become inaccessible until manual intervention.

In T325839#8556285, @Tgr wrote:

Would it be possible to expedite 1.39.2? T326071: Upgrade from 1.31.2 to 1.39 results in pages no longer being usable with "The revision #0 of the page named "x" does not exist." error is pretty bad as far as MediaWiki bugs go: upgrading from 1.32 or older to 1.39 results in loss of all user data in the revision table, and all pages become inaccessible until manual intervention.

see T326369 for that

Reedy renamed this task from Release MediaWiki 1.35.10/1.38.6/1.39.2 to Release MediaWiki 1.35.10/1.38.6/1.39.3.Feb 21 2023, 4:05 PM

Reedy updated the task description. (Show Details)

Reedy changed the status of subtask T325841: Obtain CVEs for 1.35.10/1.38.6/1.39.3 security releases from Open to In Progress.Mar 29 2023, 1:48 PM

Reedy changed the status of subtask T325842: Write and send pre-release announcements for MediaWiki 1.35.10/1.38.6/1.39.3 from Open to In Progress.Mar 29 2023, 1:59 PM

Reedy closed subtask T325842: Write and send pre-release announcements for MediaWiki 1.35.10/1.38.6/1.39.3 as Resolved.Mar 29 2023, 8:12 PM

Reedy closed subtask T325843: Write and send release announcements for MediaWiki 1.35.10/1.38.6/1.39.3 as Resolved.Mar 30 2023, 11:31 PM

Reedy closed subtask T325844: Tag 1.35.10/1.38.6/1.39.3 as Resolved.Mar 30 2023, 11:46 PM

Reedy closed subtask T325845: Update onwiki news and Module:Version as Resolved.

DannyS712 mentioned this in T333616: Release MediaWiki 1.35.11/1.38.7/1.39.4/1.40.0.Apr 4 2023, 3:33 PM

Reedy closed subtask T325840: Tracking bug for MediaWiki 1.35.10/1.38.6/1.39.3 as Resolved.Apr 4 2023, 4:52 PM

Reedy closed subtask T325847: Update Wikidata Q83 as Resolved.Apr 4 2023, 4:58 PM