User Details
User Details
- User Since
- Sep 24 2014, 6:58 PM (627 w, 5 d)
- Roles
- Administrator
- Availability
- Available
- IRC Nick
- Reedy
- LDAP User
- Reedy
- MediaWiki User
- Reedy [ Global Accounts ]
Fri, Oct 2
Fri, Oct 2
Reedy renamed T440062: MW Tarball download issues from Europe? from MW Tarball download issues to MW Tarball download issues from Europe?.
Reedy renamed T440062: MW Tarball download issues from Europe? from MW Tarball download issues from Europe? to MW Tarball download issues.
Reedy added a comment to T435863: CVE-2026-103437: ReadingLists imported canonical URL XSS.
(Please tag security fixes to their relevant bugs, and CC @gerritbot to allow it to comment even when it's private)
Reedy added a comment to T435863: CVE-2026-103437: ReadingLists imported canonical URL XSS.
rERLScee78488bb69: SECURITY: Add validation for projects when viewing exported reading lists merged this in gerrit.
Reedy closed T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, a subtask of T429197: Release MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T197160: All security-sensitive MediaWiki functionality should require elevated security, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429197: Release MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Thu, Oct 1
Thu, Oct 1
Reedy triaged T439917: makerelease2.py failing to download tarball from releases.wm.o as Low priority.
Reedy added a comment to T439917: makerelease2.py failing to download tarball from releases.wm.o.
Package Version ------------------ --------- certifi 2025.1.31 charset-normalizer 3.4.1 git-archive-all 1.23.1 idna 3.10 pip 24.0 requests 2.32.3 urllib3 2.3.0
Reedy changed the status of Restricted Task, a subtask of T429197: Release MediaWiki 1.43.10/1.45.5/1.46.1, from Open to In Progress.
Reedy changed the status of Restricted Task, a subtask of T429197: Release MediaWiki 1.43.10/1.45.5/1.46.1, from Open to In Progress.
Reedy added a comment to T422686: MediaWiki should include contact info in the User-Agent when making calls to other software.
https://www.mediawiki.org/wiki/Manual:$wgHTTPUserAgentContact still needs creating. And with backports, the @since does need updating, and that needs backporting too for consistency.
Reedy closed Restricted Task, a subtask of T429197: Release MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Wed, Sep 30
Wed, Sep 30
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Tue, Sep 29
Tue, Sep 29
Reedy removed a subtask for T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1: Unknown Object (Task).
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy closed Restricted Task, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy renamed T432424: CVE-2026-102965: Stored i18n XSS in the Flow integration of Thanks from Stored i18n XSS in the Flow integration of Thanks to CVE-2026-102965: Stored i18n XSS in the Flow integration of Thanks.
Reedy removed a project from T436429: Private tags leaked in logevents API via initialTags field: Patch-For-Review.
Reedy updated subscribers of T432424: CVE-2026-102965: Stored i18n XSS in the Flow integration of Thanks.
Reedy closed T432424: CVE-2026-102965: Stored i18n XSS in the Flow integration of Thanks as Resolved.
Reedy closed T432424: CVE-2026-102965: Stored i18n XSS in the Flow integration of Thanks, a subtask of T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1, as Resolved.
Reedy removed a subtask for T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1: Unknown Object (Task).
Reedy removed a subtask for T429198: Tracking bug for MediaWiki 1.43.10/1.45.5/1.46.1: Unknown Object (Task).
Mon, Sep 28
Mon, Sep 28
Reedy renamed T356390: Add WBStack build info to Special:Version from Add WBStack build info to Special:Version to Add WBStack build info to Special:Version.
Tue, Sep 15
Tue, Sep 15
Fri, Sep 11
Fri, Sep 11
Reedy added projects to T437728: Timeout for API request with lestart: MediaWiki-Action-API, Performance Issue.
Reedy added a comment to T435181: Wrong declaration of MWCallbackStream::write error still happening in MediaWiki 1.43.
But as per all the instances of these bugs, it's when something is installing version 2 of the psr libraries, which MW (at least in 1.43) does not ship.
Reedy added a comment to T435181: Wrong declaration of MWCallbackStream::write error still happening in MediaWiki 1.43.
On a clean install from HEAD of the REL1_43 branch from git, I see no issues, fatals etc.
Reedy updated the task description for T437727: ERROR 1133 (28000): Can't find any matching row in the user table.
Reedy updated the task description for T437727: ERROR 1133 (28000): Can't find any matching row in the user table.
Thu, Sep 10
Thu, Sep 10
Reedy added a comment to T435181: Wrong declaration of MWCallbackStream::write error still happening in MediaWiki 1.43.
This is happening with a freshly downloaded bundle without anything added in composer.local.json.
Tue, Sep 8
Tue, Sep 8
Reedy updated the task description for T435623: CVE-2026-103440: PageTriage pagetriagelist discloses suppressed reviewer usernames.
Reedy moved T437004: Skip badlogin captcha for passwordless authentication from Backlog to User Experience on the MediaWiki-extensions-OATHAuth board.
Sep 2 2026
Sep 2 2026
Reedy removed a subtask for T424851: Create notification to tell user to remove (and potentially replace) WebAuthn keys that don't meet our current criteria for registration: Unknown Object (Task).
Reedy added a comment to T431840: Stop allowing login with SHA-1/RS1 keys.
We already have SHA1 keys saved in the DB, as per the logspam, and we need to tell users they're deprecated, should use something else etc...
Aug 27 2026
Aug 27 2026
Reedy added a comment to T420341: PDF file has 0x0 image size in Commons.
reedy@deploy1003:~$ mwscript eval.php testwiki
> var_dump(\MediaWiki\MediaWikiServices::getInstance()->getMainWANObjectCache()->get( \MediaWiki\MediaWikiServices::getInstance()->getRepoGroup()->getLocalRepo()->getSharedCacheKey('file', sha1( 'TestBug.pdf' ) ) ) );
bool(false)Aug 26 2026
Aug 26 2026
Reedy moved T436066: Initial 2FA not created on otrs_wikiwiki from Backlog to Bugs on the MediaWiki-extensions-OATHAuth board.
Reedy moved T436012: Unable to switch from recovery code form back to other methods from Backlog to Bugs on the MediaWiki-extensions-OATHAuth board.
Reedy renamed T436194: Make 2FA enforcement related maintenance scripts skip blocked users by default from Make 2FA enforcement related maintenance scripts for skip blocked users by default to Make 2FA enforcement related maintenance scripts skip blocked users by default.
Reedy added a comment to T436066: Initial 2FA not created on otrs_wikiwiki.
Apparently this worked before in prod, maybe some recent changes upsetting other stuff?
Reedy raised the priority of T436066: Initial 2FA not created on otrs_wikiwiki from Low to Needs Triage.
There's a few other errors that appear too...
Reedy changed the subtype of T436066: Initial 2FA not created on otrs_wikiwiki from "Task" to "Production Error".
Reedy changed the visibility for F100196434: Screenshot 2026-08-26 at 10.24.08.png.
Confirmed this works locally...
Aug 24 2026
Aug 24 2026
Aug 23 2026
Aug 23 2026
Reedy changed the visibility for F99687743: Screenshot 2026-08-23 at 18.07.28.png.
Aug 21 2026
Aug 21 2026
Reedy updated the task description for T435624: CVE-2026-103442: CentralAuth MergeAccount PHP object injection via session-key substitution.
Reedy updated subscribers of T435624: CVE-2026-103442: CentralAuth MergeAccount PHP object injection via session-key substitution.
Removed from global groups by @Ajraddatz. Removed from * (as per the CentralAuth default config) in a patch in PrivateSettings.php
Reedy added a comment to T435624: CVE-2026-103442: CentralAuth MergeAccount PHP object injection via session-key substitution.
Reedy added a comment to T435624: CVE-2026-103442: CentralAuth MergeAccount PHP object injection via session-key substitution.
https://meta.wikimedia.org/wiki/Special:GlobalGroupPermissions suggests limited groups with access (centralauth-merge right), founder, staff, stewards and sysadmin
Reedy triaged T435624: CVE-2026-103442: CentralAuth MergeAccount PHP object injection via session-key substitution as High priority.
Reedy updated the task description for T435618: 2FA warning shown to users with 2FA on reauth screens.
Aug 20 2026
Aug 20 2026
Reedy renamed T435507: Create a card list [card only] from Create a card list [card only] to Create a card list [card only].
Reedy renamed T435507: Create a card list [card only] from Create a card list [card only] to Create a card list [card only].