Hi, our beloved SMASH (internal security tool) brought us two security issues for Mediawiki today: https://phabricator.wikimedia.org/T239209 https://phabricator.wikimedia.org/T239466 I only found it in openSUSE:infrastructure:wiki, so I thought you might be interested Johannes -- GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg Geschäftsführer: Felix Imendörffer (HRB 36809, AG Nürnberg)
Am December 11, 2019 10:26:01 AM UTC schrieb Johannes Segitz <jsegitz@suse.de>:
I only found it in openSUSE:infrastructure:wiki, so I thought you might be interested
Indeed, it is! Thanks for keeping an eye on it! Could we use the potential update for a migration of the databases as well? At the moment, I see that the wikis are still using an old cluster in another network. I would love to see the wikis utilizing the new galera cluster in the same network instead. This could be also done independently, but if we might have a (short) downtime anyway... Regards, Lars *who_volunteers_to_help_with_the_migration*the -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
Hello, Am Mittwoch, 11. Dezember 2019, 18:42:16 CET schrieb Lars Vogdt:
Am December 11, 2019 10:26:01 AM UTC schrieb Johannes Segitz <jsegitz@suse.de>:
I only found it in openSUSE:infrastructure:wiki, so I thought you might be interested
Indeed, it is! Thanks for keeping an eye on it!
Could we use the potential update for a migration of the databases as well? At the moment, I see that the wikis are still using an old cluster in another network. I would love to see the wikis utilizing the new galera cluster in the same network instead. This could be also done independently, but if we might have a (short) downtime anyway...
I have the wiki update on my radar / TODO list and already prepared some packages [1], but got sidetracked by various other things. I'm afraid I won't be able to do the actual upgrade within a few days. To give you some insight - the new MediaWiki version also needs a new elasticsearch version. The VM for that (water3) is already running, I "just" need to install (via salt) elasticsearch there - but before that, I'll need to adjust our salt code for the new version. The salt code for MediaWiki also needs a few ;-) updates. And yes, as part of the update, I also plan to move the database - which will need some more changes in salt, but OTOH gives me a "free" backup of the database status before the update. Ideally we should also manage the mysql users and database permissions in salt (using mysql-formula) because I'm not too keen to create ~20 databases and users for all our wikis manually ;-) The funny part is to use mysql-formula on top of our manually set up galera cluster, but I hope that "only" using the parts that create users and databases will work. BTW: At the risk of disappointing Lars - I don't plan to have a downtime, only a short "read-only time" ;-)
Lars *who_volunteers_to_help_with_the_migration*the
I'm an idiot.. At least this [bug] took about 5 minutes to find.. We need to find some new terms to describe the rest of us mere mortals
You might regret that ;-) Regards, Christian Boltz [1] currently living in home:cboltz:infra -- then. -- Craig Schlenter in response to Linus Torvalds -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
participants (3)
-
Christian Boltz -
Johannes Segitz -
Lars Vogdt