Change Details

Previous work: {T311785} | Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_37 | REL1_38 | REL1_39 | master | ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | T321733 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-xxxxx | CVE-2022-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T315123 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22912 | CVE-2023-22912 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T320987 | [[ https://www.mediawiki.org/wiki/Extension:MobileFrontend | MobileFrontend ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22909 | CVE-2023-22909 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/857762 | Yes ]] | T149488 | [[ https://www.mediawiki.org/wiki/Extension:Widgets | Widgets ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22911 | CVE-2023-22911 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/856581 | Yes ]] | [[ https://gerrit.wikimedia.org/r/856035 | Yes ]] | T323592 | [[ https://www.mediawiki.org/wiki/Extension:Wikibase | Wikibase ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22910 | CVE-2023-22910 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] **Template** | Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-yyyyy | CVE-2022-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] **Notes** # T311337 is carried over from last time, when it was pulled from the release, due to T316414 and T318166 being the same issue and still not being patched/deployed yet. # {T312733} is possible but not sure if there's a fix for it. - WikiForum

Previous work: {T311785} | Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_37 | REL1_38 | REL1_39 | master | ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | T316414 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T311337 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T316414 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T318166 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T321733 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22945 | CVE-2023-22945 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T315123 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22912 | CVE-2023-22912 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T320987 | [[ https://www.mediawiki.org/wiki/Extension:MobileFrontend | MobileFrontend ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22909 | CVE-2023-22909 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/857762 | Yes ]] | T149488 | [[ https://www.mediawiki.org/wiki/Extension:Widgets | Widgets ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22911 | CVE-2023-22911 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/856581 | Yes ]] | [[ https://gerrit.wikimedia.org/r/856035 | Yes ]] | T323592 | [[ https://www.mediawiki.org/wiki/Extension:Wikibase | Wikibase ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22910 | CVE-2023-22910 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] **Template** | Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-yyyyy | CVE-2023-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] **Notes** # T311337 is carried over from last time, when it was pulled from the release, due to T316414 and T318166 being the same issue and still not being patched/deployed yet. # {T312733} is possible but not sure if there's a fix for it. - WikiForum

Previous work: {T311785} | Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_37 | REL1_38 | REL1_39 | master | ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | T316414 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T311337 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T316414 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T318166 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 | CVE-2022-39193 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T321733 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-xxxxx3-22945 | CVE-2022-xxxxx3-22945 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T315123 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22912 | CVE-2023-22912 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | T320987 | [[ https://www.mediawiki.org/wiki/Extension:MobileFrontend | MobileFrontend ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22909 | CVE-2023-22909 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/857762 | Yes ]] | T149488 | [[ https://www.mediawiki.org/wiki/Extension:Widgets | Widgets ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22911 | CVE-2023-22911 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/856581 | Yes ]] | [[ https://gerrit.wikimedia.org/r/856035 | Yes ]] | T323592 | [[ https://www.mediawiki.org/wiki/Extension:Wikibase | Wikibase ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22910 | CVE-2023-22910 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] **Template** | Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20223-yyyyy | CVE-20223-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] **Notes** # T311337 is carried over from last time, when it was pulled from the release, due to T316414 and T318166 being the same issue and still not being patched/deployed yet. # {T312733} is possible but not sure if there's a fix for it. - WikiForum