Maniphest T382316

Release MediaWiki 1.39.12/1.42.6/1.43.1
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	Reedy
	Dec 17 2024, 11:50 AM

Tags

Referenced Files

None

Subscribers

Description

Previous release work: {T375621}

Tracking for activities actually pertaining to making the release of MediaWiki 1.39.12/1.42.5/1.43.1

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		None	T382316 Release MediaWiki 1.39.12/1.42.6/1.43.1
					Restricted Task
		Resolved	Security	matmarex	T304474 CVE-2025-32696: "reupload-own" restriction can be bypassed by reverting file
		Resolved		matmarex	T140010 CVE-2025-32697: Cascading protection is not preventing file reversions
		Resolved	Security	matmarex	T385958 CVE-2025-32698: LogPager.php: Restriction enforcer functions do not correctly enforce suppression restrictions
		Resolved	Security	cscott	T387130 CVE-2025-32699: Potential javascript injection attack enabled by Unicode normalization in Action API
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
					Restricted Task
		Resolved		None	T382323 Update onwiki release notes for 1.39.12/1.42.6/1.43.1
					Restricted Task
		Resolved		• Zabe	T382325 Update HISTORY in master after 1.39.12/1.42.6/1.43.1
		Resolved		Mstyles	T382326 Write and send supplementary release announcement for extensions and skins with security patches (1.39.12/1.42.6/1.43.1)

Event Timeline

Reedy added projects: Security, MediaWiki-Releasing.Dec 17 2024, 11:50 AM

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 17 2024, 11:50 AM

Reedy added subtasks: Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, T382323: Update onwiki release notes for 1.39.12/1.42.6/1.43.1, Restricted Task, T382325: Update HISTORY in master after 1.39.12/1.42.6/1.43.1, T382326: Write and send supplementary release announcement for extensions and skins with security patches (1.39.12/1.42.6/1.43.1).Dec 17 2024, 11:50 AM

Reedy updated the task description. (Show Details)Dec 20 2024, 12:50 PM

• roti_WMDE mentioned this in T384825: Maintenance release: MediaWiki 1.42.4.Feb 3 2025, 1:04 PM

Reedy renamed this task from Release MediaWiki 1.39.12/1.42.5/1.43.1 to Release MediaWiki 1.39.12/1.42.6/1.43.1.Feb 3 2025, 5:30 PM

Lucas_Werkmeister_WMDE mentioned this in T381617: XSS in Charts extension combined with TemplateStyles, LanguageConverter, ToC.Feb 7 2025, 4:20 PM

sbassett mentioned this in T387130: CVE-2025-32699: Potential javascript injection attack enabled by Unicode normalization in Action API.Mar 7 2025, 3:28 PM

Reedy mentioned this in T389302: Release MediaWiki 1.39.13/1.42.7/1.43.2.Mar 19 2025, 12:49 AM

Reedy changed the status of subtask Restricted Task from Open to In Progress.Mar 24 2025, 1:18 PM

Reedy changed the status of subtask Restricted Task from Open to In Progress.

Mstyles added a subtask: Restricted Task.Mar 24 2025, 10:30 PM

Reedy changed the status of subtask Restricted Task from Open to In Progress.Apr 9 2025, 1:15 PM

Reedy removed a subtask: Restricted Task.Apr 9 2025, 2:31 PM

Reedy closed subtask Restricted Task as Resolved.Apr 9 2025, 8:59 PM

Reedy closed subtask Restricted Task as Resolved.Apr 10 2025, 4:41 PM

Reedy closed subtask Restricted Task as Resolved.Apr 10 2025, 5:53 PM

Reedy closed subtask Restricted Task as Resolved.Apr 10 2025, 5:59 PM

Reedy closed subtask Restricted Task as Resolved.Apr 10 2025, 6:01 PM

Reedy closed subtask Restricted Task as Resolved.

Reedy closed subtask Restricted Task as Resolved.Apr 10 2025, 6:33 PM

sbassett closed subtask T382326: Write and send supplementary release announcement for extensions and skins with security patches (1.39.12/1.42.6/1.43.1) as Resolved.Apr 11 2025, 4:59 PM

RhinosF1 reopened subtask T382326: Write and send supplementary release announcement for extensions and skins with security patches (1.39.12/1.42.6/1.43.1) as Open.Apr 11 2025, 5:35 PM

Restricted Application added a subscriber: RhinosF1. · View Herald TranscriptApr 11 2025, 5:35 PM

sbassett closed subtask T382326: Write and send supplementary release announcement for extensions and skins with security patches (1.39.12/1.42.6/1.43.1) as Resolved.Apr 11 2025, 8:55 PM

sbassett mentioned this in T382326: Write and send supplementary release announcement for extensions and skins with security patches (1.39.12/1.42.6/1.43.1).Apr 17 2025, 10:50 PM

• Zabe closed subtask T382325: Update HISTORY in master after 1.39.12/1.42.6/1.43.1 as Resolved.Jan 1 2026, 12:17 PM

• Zabe closed this task as Resolved.Jan 1 2026, 12:27 PM

• Zabe closed subtask T382323: Update onwiki release notes for 1.39.12/1.42.6/1.43.1 as Resolved.

• Zabe changed the visibility from "acl*security (Project)" to "Public (No Login Required)".

• Zabe changed the edit policy from "acl*security (Project)" to "All Users".