Re: [Wikitech-l] Monthly MediaWiki releases
On Mar 26, 2015 5:47 PM, Greg Grossmeier g...@wikimedia.org wrote: quote name=Thomas Mulhall date=2015-03-26 time=20:30:30 + Hi it has been 3-4 months since the last mediawiki releases when will they have a new release since it has been a long time. Sorry about the delay; the Wikimedia Foundation had a third-party security audit of our site and code (including MediaWiki). This turned up a number of security issues that we have been/are fixing. Some are taking longer than expected. The stated understanding before the security audit was to: * Have the audit completed (Done) * Address all issues found (in-progress) * Release both a security release of MW (and extensions) along with the security audit for public consumption. Oh cool. That should be an interesting read. --bawolff ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Monthly MediaWiki releases
quote name=Greg Grossmeier date=2015-03-26 time=13:46:57 -0700 We hope to have that security release out soon; we are working on it (the issues) in earnest. I know it's not the most helpful thing (because the blocking tasks are private, and have other blocking tasks that are also private) but this is the tracking bug for the release: https://phabricator.wikimedia.org/T88120 Greg -- | Greg GrossmeierGPG: B2FA 27B1 F7EB D327 6B8E | | identi.ca: @gregA18D 1138 8E47 FAC8 1C7D | ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Monthly MediaWiki releases
quote name=Thomas Mulhall date=2015-03-26 time=20:30:30 + Hi it has been 3-4 months since the last mediawiki releases when will they have a new release since it has been a long time. Sorry about the delay; the Wikimedia Foundation had a third-party security audit of our site and code (including MediaWiki). This turned up a number of security issues that we have been/are fixing. Some are taking longer than expected. The stated understanding before the security audit was to: * Have the audit completed (Done) * Address all issues found (in-progress) * Release both a security release of MW (and extensions) along with the security audit for public consumption. Obviously we don't want to release the audit until after fixes for all of the issues are released. We hope to have that security release out soon; we are working on it (the issues) in earnest. Thanks for your understanding, Greg -- | Greg GrossmeierGPG: B2FA 27B1 F7EB D327 6B8E | | identi.ca: @gregA18D 1138 8E47 FAC8 1C7D | ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Monthly MediaWiki releases
By the way: This bug is linked from https://www.mediawiki.org/wiki/MediaWiki_1.24 in the Release schedule, too :) Best Florian -Ursprüngliche Nachricht- Von: wikitech-l-boun...@lists.wikimedia.org [mailto:wikitech-l-boun...@lists.wikimedia.org] Im Auftrag von Greg Grossmeier Gesendet: Donnerstag, 26. März 2015 22:01 An: wikitech-l@lists.wikimedia.org Betreff: Re: [Wikitech-l] Monthly MediaWiki releases quote name=Greg Grossmeier date=2015-03-26 time=13:46:57 -0700 We hope to have that security release out soon; we are working on it (the issues) in earnest. I know it's not the most helpful thing (because the blocking tasks are private, and have other blocking tasks that are also private) but this is the tracking bug for the release: https://phabricator.wikimedia.org/T88120 Greg -- | Greg GrossmeierGPG: B2FA 27B1 F7EB D327 6B8E | | identi.ca: @gregA18D 1138 8E47 FAC8 1C7D | ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
