[Wikitech-l] Security pre-release announcement: 1.35.10 / 1.38.6 / 1.39.3

2023-03-29 Thread Sam Reed
Hi all,

On Thursday we will be issuing a security and maintenance release to all
supported branches of MediaWiki.

The new releases will be:

- 1.35.10
- 1.38.6
- 1.39.3

This will resolve one issue in MediaWiki core, and two issues in bundled
extensions along with bug fixes included for maintenance reasons. This
includes various patches for PHP 8.0, PHP 8.1 and PHP 8.2 support.

We will make the fixes available in the respective release branches (plus
1.40 which is currently in alpha candidate status) and master in git.
Tarballs will be available for the above mentioned point releases as well.

A summary of some of the security fixes that have gone into non-bundled
MediaWiki extensions will also follow later.

As a reminder, 1.38 is due to become end of life (EOL) in June 2023. 1.38.7
(due in June 2023 on the usual release cadence) is expected to be the last
release for this branch. It is recommended to upgrade to 1.39 (the next LTS
after 1.35).

[1] https://www.mediawiki.org/wiki/Version_lifecycle
___
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/

[Wikitech-l] Re: How to give a range block now?

2023-03-29 Thread Bináris
Dreamy Jazz  ezt írta (időpont: 2023. márc.
29., Sze, 9:22):

> This has been fixed and should be out on wikis this week if I understand
> correctly (otherwise will be next week). Associated task is
> https://phabricator.wikimedia.org/T332994
>

Great, thank you!
___
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/

[Wikitech-l] Re: How to give a range block now?

2023-03-29 Thread Dreamy Jazz
This has been fixed and should be out on wikis this week if I understand
correctly (otherwise will be next week). Associated task is
https://phabricator.wikimedia.org/T332994

On Wed, 29 Mar 2023, 08:18 Bináris,  wrote:

> Hi,
> I was surprised that the blocking interface followed others, and
> automatically and unchangeably fills the field with the user name or IP.
> Thus I cannot write a range after the IP any more. I captured a very small
> image with the problem, but it is not allowed here.
> Now, while range block for IPv4 anons is an everyday task, range block for
> IPv6 anons is compulsory every time. We give /64, otherwise it is
> senseless. By this time, I just wrote "/64" on the blocking interface after
> the IP.
> I don't know, when and why happened this change, but it makes blocking
> very tricky uncomfortable. What I can do, write /64 into the URL at the
> contributions of the vandal, but that is really not what I dreamt about.
>
> Can somebody explain, why this happened? Is there a way of range blocking
> that I am not aware of? Shall I ticket a bug?
>
>
>
> --
> Bináris
> ___
> Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
> To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org
> https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
___
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/

[Wikitech-l] How to give a range block now?

2023-03-29 Thread Bináris
 Hi,
I was surprised that the blocking interface followed others, and
automatically and unchangeably fills the field with the user name or IP.
Thus I cannot write a range after the IP any more. I captured a very small
image with the problem, but it is not allowed here.
Now, while range block for IPv4 anons is an everyday task, range block for
IPv6 anons is compulsory every time. We give /64, otherwise it is
senseless. By this time, I just wrote "/64" on the blocking interface after
the IP.
I don't know, when and why happened this change, but it makes blocking very
tricky uncomfortable. What I can do, write /64 into the URL at the
contributions of the vandal, but that is really not what I dreamt about.

Can somebody explain, why this happened? Is there a way of range blocking
that I am not aware of? Shall I ticket a bug?



-- 
Bináris
___
Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org
To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/