On 07/19/2016 05:30 PM, Matthew Flaschen wrote:
Two security issues related to topic title visibility
and log entry
hiding were fixed in Flow:
*
https://gerrit.wikimedia.org/r/299863
*
https://gerrit.wikimedia.org/r/299864
If you are using master, please pull.
Patches are coming for release branches (see follow ups to this thread).
Patches for both supported release branches (REL1_26 and REL1_27) are
merged as well, so you should pull for them too:
*
https://gerrit.wikimedia.org/r/#/c/299882/
*
https://gerrit.wikimedia.org/r/#/c/299883/
*
https://gerrit.wikimedia.org/r/#/c/299884/
*
https://gerrit.wikimedia.org/r/#/c/299885/
Note that these are the only supported release branches for Flow (other
than current WMF deployment release branches).
Flow was previously marked as supporting 1.24+. We no longer support
1.24 or 1.25 (Core also does not; see
https://www.mediawiki.org/wiki/Version_lifecycle#Versions_and_their_end-of-…).
If you are using 1.24 or 1.25, you should upgrade as soon as possible.
Matt