This will probably happen several weeks after 1.27 is released.
MW Versions: 1.27.1/1.26.4/1.23.15. Note, 1.25 is already EOL.
Core
----
| Maniphest ID | CVE ID | REL1_23 | REL1_26 | REL1_27 | REL1_28/master |
| T115333 | CVE-2016-6331 | {F4206441} |{F4206445} |{F4206446} |{F4206439} |
| T129738 | CVE-2016-6332 | {F4284814},{F4284815}|{F4284818},{F4284819} |{F4284820},{F4284822} | {F3892860},{F4232102} |
| T133147 | CVE-2016-6333 | {F4206448},{F4206458} |{F4206451},{F4206460} |{F4206453},{F4206461} |{F4206447},{F4286669} |
| T137264 | CVE-2016-6334 | {F4206468} | {F4206481}|{F4206483} | {F4141510} |
| T139570 | CVE-2016-6335 | {F4284745} |{F4284747} |{F4284748} | Already present |
| T132926 | CVE-2016-6336 | {F4326029} |{F4326031} |{F4326031} | {F4326039} |
| T139670 | CVE-2016-6337 | n/a (no SessionManager) | n/a (no SessionManager) | {F4274481} | {F4274481} |
Extensions
----
| | REL1_23 | REL1_26 | REL1_27 | REL1_28/master |
| T136402 [pdfHandler] | {F4206464} | {F4160209} | {F4160209} | {F4160209} [master patch applies cleanly to everything except 1.23]|
Other potential things
-----
Other things that maybe should be included (?)
* {T139910}
* {T135591}