[09:02:40] hmm [09:03:23] CirrusSearch uses EOL Elasticsearch 6 which in turn uses log4j [09:06:10] oh, apparently there will be a 6.8.22 with fixes [09:08:10] CVE: https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476 [09:08:19] It looks like the WMF workaround (for now?) is https://gerrit.wikimedia.org/r/c/operations/puppet/+/745901/2/modules/elasticsearch/templates/jvm.options.erb [09:08:41] Elastica 6.8.x is not EOL for a few months [09:10:02] their post also states that ES is not affected by RCE [09:10:34] just information disclosure which is *probably* nothing in my case since my wiki is public and ES runs in a jail [18:28:51] Hi, I've upgraded MediaWiki 1.36 to MediaWiki 1.37 using tarball archive, and I'm facing this error now. [18:28:52] [4ea140061dd1326d06167bc6] /articles/Main_Page Error: Call to undefined method GuzzleHttp\Utils::chooseHandler() [18:28:59] I'm totally sure that everything is uploaded. [18:30:27] Where's the error coming from? [18:30:57] MediaWiki doesn't seemingly call Utils::chooseHandler() directly [18:33:20] On wiki. [18:33:29] https://www.roovet.com/articles/Main_Page [18:35:43] https://github.com/wikimedia/mediawiki-vendor/blob/REL1_37/guzzlehttp/guzzle/src/Utils.php#L91 [18:35:54] It would sound like something isn't quite right with your vendor [18:39:15] Which is from tarball. [18:39:42] Downloaded from here: https://releases.wikimedia.org/mediawiki/1.37/ [18:40:01] File mediawiki-1.37.0.zip [18:40:17] > #0 /home/warwolf12/public_html/articles/extensions/GoogleAnalyticsMetrics/vendor/guzzlehttp/guzzle/src/HandlerStack.php(42): GuzzleHttp\choose_handler() [18:40:21] That file isn't from vendor [18:40:26] And is probably your problem [18:40:52] You seem to have a duplicate library installed in an extensions vendor repo [18:41:02] GoogleAnalyticsMetrics is downloaded from extension distributor. [18:41:14] Yes [18:41:30] But it will download whatever version of guzzle to satisfy google/apiclient [18:41:34] Not whatever MW itself needs [18:42:02] Delete the vendor folder from the extension, and use composer-merge-plugin to install the extensions dependancy [18:42:38] and/or look in the /home/warwolf12/public_html/articles/extensions/GoogleAnalyticsMetrics/vendor/composer.lock to see what version of guzzle it's downloaded [18:42:59] https://packagist.org/packages/google/apiclient#v2.2.1 is ancient [18:43:05] guzzlehttp/guzzle: ~5.3.1|~6.0 [18:43:22] https://github.com/wikimedia/mediawiki/blob/REL1_37/composer.json#L36 [18:43:25] "guzzlehttp/guzzle": "7.2.0", [18:44:05] Looks like google/apiclient needs updating to at least 2.6.0 [18:46:00] Everything was ok in MediaWiki 1.36, I'm facing issue in 1.37. [18:46:50] Yes [18:47:31] Both have the same version of Guzzle... [18:47:37] So you've done something differently [18:49:45] I didn't do anything different to know that I did. [18:50:25] * Reedy shrugs [18:50:26] some other articles on that wiki return a different error: MWException: The lua binary (/home/warwolf12/public_html/articles/extensions/Scribunto/includes/engines/LuaStandalone/binaries/lua5_1_5_linux_64_generic/lua) is not executable [18:50:31] so maybe check perms everywhere? [18:51:29] https://github.com/wikimedia/mediawiki/blob/REL1_37/composer.json#L36 vs https://github.com/wikimedia/mediawiki/blob/REL1_36/composer.json#L36 [18:51:32] Damn Scribunto.. Checking everything now... [18:52:08] https://github.com/wikimedia/mediawiki-extensions-GoogleAnalyticsMetrics/blob/REL1_36/composer.json#L23 vs https://github.com/wikimedia/mediawiki-extensions-GoogleAnalyticsMetrics/blob/REL1_37/composer.json#L23 [18:56:48] I will try to bump numbers [18:57:58] It did job. [18:58:16] If there aren't any bugs, I will create a patch. Resolved. :) [19:06:52] New error with the Scribunto [19:06:53] Lua error: Internal error: The interpreter has terminated with signal "11". [19:07:19] Requirements are okay. [19:25:48] Everything works now, thank you! [19:26:36] That's a lot of working things [19:27:25] especially for mediawiki /s [20:10:17] I'm having an issue on all my wikis after enabling VE: VE will not work for any subpage (REST 404 error), but it works perfectly on all pages that are not subpages. I got to this state by using this https://phabricator.wikimedia.org/T270376#7365202 for Apache2.4 conf. It works even as the MediaWiki is in w/ and wiki is in /wiki/ which was not the case for the writer of that ticket. Should I try asking in that ticket or should I make a new ticket ( [20:10:18] I do not think I have seen any ticket complaining that VE is broken just for the subpages [20:13:08] Iamthehuman1: probably https://phabricator.wikimedia.org/T261921 I think? [20:14:11] https://www.mediawiki.org/wiki/Extension:VisualEditor#Allowing_VisualEditor_on_page_titles_containing_slashes [20:14:39] Oooo. Thank you legoktm[m] [20:15:07] yw :) [20:24:29] legoktm[m]: yeah, adding that "AllowEncodedSlashes NoDecode" to the directive and I am able to edit a subpage with VE on my private test wiki. Just happens I made and verified backups and snapshotted just a few hours ago, so I'm going to roll this fix out to all the wikis [20:25:16] Great!