Difference between revisions of "T281972: ActorStore::checkDatabaseDomain: InvalidArgumentException: DB connection domain does not match when suppressing via Special:CentralAuth (CVE-2021-36128)"

Latest revision as of 20:11, 13 November 2021

Phabricator Link	T281972
Status	resolved
Priority	Lowest (sky)
Points
Phabricator Task Created	2021/05/05 07:36 AM
Wiki Page Created	2021/05/10 08:38 AM
Phabricator Task Last Modified	2021/11/13 06:00 PM
Wiki Page Last Updated	2021/11/13 08:11 PM
Phabricator Task Closed	2021/07/02 04:12 PM
Authored By	hoo (Marius Hoch)
Assigned To	Pchelolo
Projects	MW-1.36-notes (Backlog) MW-1.36-release (Not a blocker) MW-1.37-notes MW-1.38-notes (1.38.0-wmf.9; 2021-11-16) MediaWiki-User-management (Backlog) MediaWiki-extensions-CentralAuth (Incoming) Patch-For-Review Platform Team Workboards (MW Expedition) (UserStore pile) SecTeam-Processed (Completed) Security Security-Team (Our Part Is Done) Stewards-and-global-tools (Untriaged) Wikimedia-production-error (May 2021)
Platform Engineering Initiative Column
Platform Team Workboards Column	MW Expedition: UserStore pile
Subtasks	T274817: Convert DatabaseBlock and AbstractBlock to UserIdentity, and make them cross-wiki aware. (open)
Parent Tasks

Column Transitions: (Added project: ⇑, Removed project: ⇓,Entered column: ⇒, Exited column: ⇐)

Project	Column	Date
⇑ MediaWiki-extensions-CentralAuth		5 May 2021
⇑ MediaWiki-User-management		5 May 2021
⇑ Wikimedia-production-error		5 May 2021
⇑ Security		5 May 2021
⇑ Security-Team		5 May 2021
⇑ Platform Team Workboards (MW Expedition)		5 May 2021
⇑ MW-1.36-release		10 May 2021
⇑ MW-1.37-notes (1.37.0-wmf.4; 2021-05-04)		10 May 2021
⇓ Security-Team		10 May 2021
⇑ SecTeam-Processed		10 May 2021
⇑ Patch-For-Review		10 May 2021
⇓ MW-1.37-notes (1.37.0-wmf.4; 2021-05-04)		11 May 2021
⇑ MW-1.37-notes (1.37.0-wmf.6; 2021-05-18)		11 May 2021
⇑ MW-1.36-notes		11 May 2021
⇑ Security-Team		14 May 2021
⇑ PermanentlyPrivate		14 May 2021
Security-Team	⇐ Incoming	17 May 2021
Security-Team	⇒ Security Patch To Deploy	17 May 2021
Wikimedia-production-error	⇐ Untriaged	19 May 2021
Wikimedia-production-error	⇒ May 2021	19 May 2021
MW-1.36-release	⇐ Blocker	20 May 2021
MW-1.36-release	⇒ Not a blocker	20 May 2021
⇑ Stewards-and-global-tools		2 June 2021
⇓ Patch-For-Review		3 June 2021
Security-Team	⇐ Security Patch To Deploy	3 June 2021
Security-Team	⇒ Watching	3 June 2021
Platform Team Workboards (MW Expedition)	⇐ Unsorted pile	8 June 2021
Platform Team Workboards (MW Expedition)	⇒ UserStore pile	8 June 2021
⇓ PermanentlyPrivate		2 July 2021
Security-Team	⇐ Watching	2 July 2021
Security-Team	⇒ Our Part Is Done	2 July 2021
⇓ MW-1.37-notes (1.37.0-wmf.6; 2021-05-18)		3 July 2021
⇑ MW-1.37-notes (1.37.0-wmf.14; 2021-07-12)		3 July 2021
⇑ Patch-For-Review		13 November 2021
⇓ MW-1.37-notes (1.37.0-wmf.14; 2021-07-12)		13 November 2021
⇑ MW-1.38-notes (1.38.0-wmf.9; 2021-11-16)		13 November 2021
⇑ MW-1.37-notes		13 November 2021

@@ Line 1: / Line 1: @@
 {{Phabricator Task
-|name=ActorStore::checkDatabaseDomain: InvalidArgumentException: DB connection domain does not match when suppressing via Special:CentralAuth
+|name=ActorStore::checkDatabaseDomain: InvalidArgumentException: DB connection domain does not match when suppressing via Special:CentralAuth (CVE-2021-36128)
-|status=open
+|status=resolved
-|color=violet
+|color=sky
 |points=
 |dateCreated=1620214587
-|dateModified=1620647119
+|dateModified=1636844428
+|dateClosed=1625256724
 |author={{Phabricator User
 |type=author
@@ Line 17: / Line 18: @@
 }}
 |projects={{Phabricator Project
+|name=MW-1.38-notes
+|column=1.38.0-wmf.9; 2021-11-16
+|entryDate=1620214587
+}}{{Phabricator Project
 |name=Platform Team Workboards (MW Expedition)
-|column=Unsorted pile
+|column=UserStore pile
+|entryDate=1623152808
+}}{{Phabricator Project
+|name=MW-1.36-notes
+|column=Backlog
 |entryDate=1620214587
 }}{{Phabricator Project
 |name=MW-1.36-release
-|column=Blocker
+|column=Not a blocker
+|entryDate=1621532347
+}}{{Phabricator Project
+|name=MW-1.37-notes
 |entryDate=1620214587
 }}{{Phabricator Project
@@ Line 31: / Line 43: @@
 |name=MediaWiki-extensions-CentralAuth
 |column=Incoming
+|entryDate=1620214587
+}}{{Phabricator Project
+|name=Patch-For-Review
+|entryDate=1620214587
+}}{{Phabricator Project
+|name=SecTeam-Processed
+|column=Completed
 |entryDate=1620214587
 }}{{Phabricator Project
 |name=Security-Team
-|column=Incoming
+|column=Our Part Is Done
-|entryDate=1620214587
+|entryDate=1625256724
 }}{{Phabricator Project
 |name=Security
 |entryDate=1620214587
 }}{{Phabricator Project
-|name=Wikimedia-production-error
+|name=Stewards-and-global-tools
 |column=Untriaged
 |entryDate=1620214587
+}}{{Phabricator Project
+|name=Wikimedia-production-error
+|column=May 2021
+|entryDate=1621460289
 }}
+|subtasks=274817
 |transitions={{Transition
+|date=1636844428
+|type=Removed Project
+|project=MW-1.37-notes (1.37.0-wmf.14; 2021-07-12)
+}}{{Transition
+|date=1636844428
+|type=Added Project
+|project=MW-1.38-notes (1.38.0-wmf.9; 2021-11-16)
+}}{{Transition
+|date=1636844428
+|type=Added Project
+|project=MW-1.37-notes
+}}{{Transition
+|date=1636840965
+|type=Added Project
+|project=Patch-For-Review
+}}{{Transition
+|date=1625298370
+|type=Removed Project
+|project=MW-1.37-notes (1.37.0-wmf.6; 2021-05-18)
+}}{{Transition
+|date=1625298370
+|type=Added Project
+|project=MW-1.37-notes (1.37.0-wmf.14; 2021-07-12)
+}}{{Transition
+|date=1625256724
+|type=Entered Column
+|project=Security-Team
+|column=Our Part Is Done
+}}{{Transition
+|date=1625256724
+|type=Exited Column
+|project=Security-Team
+|column=Watching
+}}{{Transition
+|date=1625245106
+|type=Removed Project
+|project=PermanentlyPrivate
+}}{{Transition
+|date=1623152808
+|type=Entered Column
+|project=Platform Team Workboards (MW Expedition)
+|column=UserStore pile
+}}{{Transition
+|date=1623152808
+|type=Exited Column
+|project=Platform Team Workboards (MW Expedition)
+|column=Unsorted pile
+}}{{Transition
+|date=1622755600
+|type=Entered Column
+|project=Security-Team
+|column=Watching
+}}{{Transition
+|date=1622755600
+|type=Exited Column
+|project=Security-Team
+|column=Security Patch To Deploy
+}}{{Transition
+|date=1622755600
+|type=Removed Project
+|project=Patch-For-Review
+}}{{Transition
+|date=1622656673
+|type=Added Project
+|project=Stewards-and-global-tools
+}}{{Transition
+|date=1621532347
+|type=Entered Column
+|project=MW-1.36-release
+|column=Not a blocker
+}}{{Transition
+|date=1621532347
+|type=Exited Column
+|project=MW-1.36-release
+|column=Blocker
+}}{{Transition
+|date=1621460289
+|type=Entered Column
+|project=Wikimedia-production-error
+|column=May 2021
+}}{{Transition
+|date=1621460289
+|type=Exited Column
+|project=Wikimedia-production-error
+|column=Untriaged
+}}{{Transition
+|date=1621265740
+|type=Entered Column
+|project=Security-Team
+|column=Security Patch To Deploy
+}}{{Transition
+|date=1621265740
+|type=Exited Column
+|project=Security-Team
+|column=Incoming
+}}{{Transition
+|date=1620977664
+|type=Added Project
+|project=PermanentlyPrivate
+}}{{Transition
+|date=1620977466
+|type=Added Project
+|project=Security-Team
+}}{{Transition
+|date=1620784831
+|type=Removed Project
+|project=MW-1.37-notes (1.37.0-wmf.4; 2021-05-04)
+}}{{Transition
+|date=1620784831
+|type=Added Project
+|project=MW-1.37-notes (1.37.0-wmf.6; 2021-05-18)
+}}{{Transition
+|date=1620784831
+|type=Added Project
+|project=MW-1.36-notes
+}}{{Transition
+|date=1620664972
+|type=Added Project
+|project=Patch-For-Review
+}}{{Transition
+|date=1620659461
+|type=Removed Project
+|project=Security-Team
+}}{{Transition
+|date=1620659461
+|type=Added Project
+|project=SecTeam-Processed
+}}{{Transition
+|date=1620648031
+|type=Added Project
+|project=MW-1.37-notes (1.37.0-wmf.4; 2021-05-04)
+}}{{Transition
 |date=1620636791
 |type=Added Project