Change Details

Previous work: {T340874} | Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_39 | REL1_40 | REL1_41 | master | ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | T347704 | [[ https://www.mediawiki.org/wiki/Extension:PageTriage | PageTriage ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23174 | CVE-2024-23174 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/989177/ | Yes ]] | T348687 | [[ https://www.mediawiki.org/wiki/Extension:Cargo | Cargo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23173 | CVE-2024-23173 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/965214 | Yes ]] | T348343 | [[ https://www.mediawiki.org/wiki/Extension:CampaignTools | CampaignTools ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23171 | CVE-2024-23171 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/971248 | Yes ]] | T347708 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23172 | CVE-2024-23172 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989527 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989483 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989505 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989179 | Yes ]] | T347742 | [[ https://www.mediawiki.org/wiki/Extension:MassMessage | MassMessage ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23176 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/| No ]] | T347746 | [[ https://www.mediawiki.org/wiki/Extension:GlobalBlocking | GlobalBlocking ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23179 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/964128 | Yes ]] , [[https://gerrit.wikimedia.org/r/965084 | Yes ]] | [[ https://gerrit.wikimedia.org/r/964127 | Yes ]] , [[https://gerrit.wikimedia.org/r/965085 | Yes ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] , [[ https://gerrit.wikimedia.org/r/965206 | Yes ]] | [[ https://gerrit.wikimedia.org/r/964029 |Yes]] , [[ https://gerrit.wikimedia.org/r/965200| Yes ]] | T348979 | [[ https://www.mediawiki.org/wiki/Extension:WatchAnalytics | WatchAnalytics ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23177 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/966544 | Yes ]] | T349312 | [[ https://www.mediawiki.org/wiki/Extension:Phonos | Phonos ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23178 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/967193/ | Yes ]] | [[ https://gerrit.wikimedia.org/r/967269 | Yes ]] | T353138 | [[ https://www.mediawiki.org/wiki/Extension:FlexDiagrams | FlexDiagrams ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23175 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/991337 | Yes ]] | [[ https://gerrit.wikimedia.org/r/991336 | Yes ]] | [[ https://gerrit.wikimedia.org/r/981736 | Yes ]] --- **Template** | Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2023-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] --- **Notes** # T347744 was [[ https://gerrit.wikimedia.org/r/974684 | fixed publicly ]], but could likely be re-announced for this release.

Previous work: {T340874} | Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_39 | REL1_40 | REL1_41 | master | ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | T347704 | [[ https://www.mediawiki.org/wiki/Extension:PageTriage | PageTriage ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23174 | CVE-2024-23174 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/989177/ | Yes ]] | T348687 | [[ https://www.mediawiki.org/wiki/Extension:Cargo | Cargo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23173 | CVE-2024-23173 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/965214 | Yes ]] | T348343 | [[ https://www.mediawiki.org/wiki/Extension:CampaignTools | CampaignTools ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23171 | CVE-2024-23171 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/971248 | Yes ]] | T347708 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23172 | CVE-2024-23172 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989527 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989483 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989505 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989179 | Yes ]] | T347742 | [[ https://www.mediawiki.org/wiki/Extension:MassMessage | MassMessage ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23176 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/991326 | Yes ]] | [[ https://gerrit.wikimedia.org/r/991327 | Yes ]] | [[ https://gerrit.wikimedia.org/r/991080 | Yes ]] | T347746 | [[ https://www.mediawiki.org/wiki/Extension:GlobalBlocking | GlobalBlocking ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23179 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/964128 | Yes ]] , [[https://gerrit.wikimedia.org/r/965084 | Yes ]] | [[ https://gerrit.wikimedia.org/r/964127 | Yes ]] , [[https://gerrit.wikimedia.org/r/965085 | Yes ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] , [[ https://gerrit.wikimedia.org/r/965206 | Yes ]] | [[ https://gerrit.wikimedia.org/r/964029 |Yes]] , [[ https://gerrit.wikimedia.org/r/965200| Yes ]] | T348979 | [[ https://www.mediawiki.org/wiki/Extension:WatchAnalytics | WatchAnalytics ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23177 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/991335 | Yes ]] | [[ https://gerrit.wikimedia.org/r/966544 | Yes ]] | T349312 | [[ https://www.mediawiki.org/wiki/Extension:Phonos | Phonos ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23178 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/991335 | Yes ]] | [[ https://gerrit.wikimedia.org/r/967193/ | Yes ]] | [[ https://gerrit.wikimedia.org/r/967269 | Yes ]] | T353138 | [[ https://www.mediawiki.org/wiki/Extension:FlexDiagrams | FlexDiagrams ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23175 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/991337 | Yes ]] | [[ https://gerrit.wikimedia.org/r/991336 | Yes ]] | [[ https://gerrit.wikimedia.org/r/981736 | Yes ]] --- **Template** | Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2023-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] --- **Notes** # T347744 was [[ https://gerrit.wikimedia.org/r/974684 | fixed publicly ]], but could likely be re-announced for this release.

Previous work: {T340874} | Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_39 | REL1_40 | REL1_41 | master | ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | T347704 | [[ https://www.mediawiki.org/wiki/Extension:PageTriage | PageTriage ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23174 | CVE-2024-23174 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PageTriage/+/989177/ | Yes ]] | T348687 | [[ https://www.mediawiki.org/wiki/Extension:Cargo | Cargo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23173 | CVE-2024-23173 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/965214 | Yes ]] | T348343 | [[ https://www.mediawiki.org/wiki/Extension:CampaignTools | CampaignTools ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23171 | CVE-2024-23171 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/971248 | Yes ]] | T347708 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23172 | CVE-2024-23172 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989527 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989483 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989505 | Yes ]] | [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/989179 | Yes ]] | T347742 | [[ https://www.mediawiki.org/wiki/Extension:MassMessage | MassMessage ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23176 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No991326 | Yes ]] | [[ https://gerrit.wikimedia.org/r/ | No991327 | Yes ]] | [[ https://gerrit.wikimedia.org/r/| No991080 | Yes ]] | T347746 | [[ https://www.mediawiki.org/wiki/Extension:GlobalBlocking | GlobalBlocking ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23179 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/964128 | Yes ]] , [[https://gerrit.wikimedia.org/r/965084 | Yes ]] | [[ https://gerrit.wikimedia.org/r/964127 | Yes ]] , [[https://gerrit.wikimedia.org/r/965085 | Yes ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] , [[ https://gerrit.wikimedia.org/r/965206 | Yes ]] | [[ https://gerrit.wikimedia.org/r/964029 |Yes]] , [[ https://gerrit.wikimedia.org/r/965200| Yes ]] | T348979 | [[ https://www.mediawiki.org/wiki/Extension:WatchAnalytics | WatchAnalytics ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23177 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No991335 | Yes ]] | [[ https://gerrit.wikimedia.org/r/966544 | Yes ]] | T349312 | [[ https://www.mediawiki.org/wiki/Extension:Phonos | Phonos ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23178 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No991335 | Yes ]] | [[ https://gerrit.wikimedia.org/r/967193/ | Yes ]] | [[ https://gerrit.wikimedia.org/r/967269 | Yes ]] | T353138 | [[ https://www.mediawiki.org/wiki/Extension:FlexDiagrams | FlexDiagrams ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2024-23175 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/991337 | Yes ]] | [[ https://gerrit.wikimedia.org/r/991336 | Yes ]] | [[ https://gerrit.wikimedia.org/r/981736 | Yes ]] --- **Template** | Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2023-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] --- **Notes** # T347744 was [[ https://gerrit.wikimedia.org/r/974684 | fixed publicly ]], but could likely be re-announced for this release.