Closed Bug 395839 Opened 17 years ago Closed 16 years ago

Upgrade devmo to MediaWiki 1.11.0

Categories

(developer.mozilla.org Graveyard :: General, defect)

Product:
developer.mozilla.org Graveyard
Component:
General
Type:
defect
Priority:
Not set
Severity:
major

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: himorin, Unassigned)

References

(
URL
)

Details

as the security advisory annouced yesterday, we should upgrade MDC MW to 1.9.4 based.
Over to IT.
Assignee: nobody → server-ops
Group: security
Component: Administration → Server Operations
Product: Mozilla Developer Center → mozilla.org
QA Contact: administration → justin
Version: unspecified → other
The linked advisory contains more details, including a possible workaround if we're not using the vulnerable feature. Copied here in case of URL field damage
http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-September/000067.html
Summary: should upgrade to 1.9.4 (by security issue) → should upgrade MediaWiki installations to 1.9.4 (security issue)
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → DUPLICATE
As per bug 395746, comment #2, MDC admins need to upgrade the code in svn first so IT can upgrade devmo. Reopening and moving back to MDC :: Infrastructure.
Status: RESOLVED → REOPENED
Component: Server Operations → Infrastructure
Product: mozilla.org → Mozilla Developer Center
QA Contact: justin → infrastructure
Resolution: DUPLICATE → ---
Summary: should upgrade MediaWiki installations to 1.9.4 (security issue) → Upgrade devmo to MediaWiki 1.10.2
Version: other → unspecified
Assignee: server-ops → nobody
Status: REOPENED → NEW
As per what, exactly?  I'd understood the reason that IT wasn't doing upgrades for a while to be that they didn't know what was merged or what to do with patches, but we resolved that for IT, and got it into SVN.  We don't have webapp hackers on staff, and aren't likely to get them at any point, so I don't know why we're not getting merged, tested, and upgraded like every other such site.  The assertion in that comment doesn't really make it clear to me why that's the case.

(Other than the merge up to 1.8 and into SVN, IT staff have done all the merges and upgrades since MDC was launched years ago, I do believe.)
Latest release is 1.11.0 now.
Summary: Upgrade devmo to MediaWiki 1.10.2 → Upgrade devmo to MediaWiki 1.11.0
i think,, it might be better to test well before upgrading from 1.9.x to 1.11.x.
or, we should apply only the patch from 1.9.3 to 1.9.4.
Blocks: 380177
No longer blocks: 380177
Depends on: 380177
Invalid now that we're going to Deki.
Status: NEW → RESOLVED
Closed: 17 years ago → 16 years ago
Resolution: --- → WONTFIX
Component: Deki Infrastructure → Other
Product: developer.mozilla.org → developer.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.