Cryptograss:Moods/general/todo: Difference between revisions
From PickiPedia: A knowledge base of bluegrass, old time psychedelic jams, and other public domain music
Jump to navigationJump to search
Morning CVE check, block ~26241113 (via update-page on MediaWiki MCP Server) |
maybelle-config#215 stopgap (via update-page on MediaWiki MCP Server) |
||
| Line 2: | Line 2: | ||
<todo> | <todo> | ||
- task: "Merge maybelle-config#215 and deploy pickipedia-vps NOW: Caddy refuses multipart until PHP 8.2.35" | |||
who: jMyles | |||
by: magent | |||
kind: merge | |||
link: https://github.com/cryptograss/maybelle-config/pull/215 | |||
note: "Stopgap: attacks seen in the wild, fix lands 14:00 UTC. Uploads pause. Revert #215 once X-Powered-By says PHP/8.2.35." | |||
- task: "Morning check on the PHP CVE, at block ~26,241,113 (about 13:00 UTC, 21 Oct)" | - task: "Morning check on the PHP CVE, at block ~26,241,113 (about 13:00 UTC, 21 Oct)" | ||
who: magent | who: magent | ||
Revision as of 10:11, 21 October 2026
What this Mood is waiting on, and who has it.
- ☐Merge maybelle-config#215 and deploy pickipedia-vps NOW: Caddy refuses multipart until PHP 8.2.35Stopgap: attacks seen in the wild, fix lands 14:00 UTC. Uploads pause. Revert #215 once X-Powered-By says PHP/8.2.35.
- ☐Morning check on the PHP CVE, at block ~26,241,113 (about 13:00 UTC, 21 Oct)Has PHP 8.2.35 shipped (then Justin deploys pickipedia-vps)? Is the demo still down (:4009/:14003)? Any working exploit published? Live wiki still healthy? Ask re if needed.
- ☐Merge pickipedia#152: preview wikis on hunter get session.upload_progress off tooCompanion to maybelle-config#212, for the image hunter's public preview wikis run. All previews were down (502) on 21 Oct, so it's for the next one someone starts.
Done (3)
- ☑Deploy pickipedia-vps again once PHP 8.2.35 ships, and check X-Powered-By says 8.2.35The second half of the PHP upload_progress fix. #212 is live (deploy 26239383, 21 Oct): upload_progress is off, but the multipart-parser path stays open until PHP itself is patched. --pull means the next deploy after the release picks it up. Optional check now: docker exec pickipedia-wiki php -i | grep upload_progress.enabled
- ☑Merge maybelle-config#212 and deploy pickipedia-vps: PHP session.upload_progress off, build pulls current PHPPHP use-after-free (CVE-2026-109618/-109619). The wiki runs PHP 8.2.34 with upload_progress at its default, On. Then deploy again once PHP 8.2.35 ships; --pull makes that deploy pick it up.
- ☑Merge memory-lane#159 and deploy maybelle: a failed image upload's error stays on screenSky's screenshot paste 'glitched out and disappeared' (10 Oct): the error was cleared the instant it appeared. Three-line reorder, untested in a browser.