Per @Tarrow in the cross-LOD chat, a security update to Mediawiki shipped last Monday (June 29). We should ship the update to our clients ASAP.
mailing list announcement: https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/J52N2ONQO7GP3XR7UIEA5PI7SVZYTBJ7/
Goal for WBS:
- ship security release asap