[MediaWiki-announce] Security and maintenance release: 1.31.11 / 1.35.1 includes the sentence: "An "MediaWiki Extensions Security Release Supplement" email will follow this one." but this doesn't seem to have been sent. What extensions are impacted by security issues?
Topic on Talk:MediaWiki 1.35
I personally would love to see these two announcements sent the same day to allow people touch their wiki at the same time. Anyhow, this announcement is still in the pipeline. If you have the Widgets extension running - you can update now. All the rest will be disclosed in the upcoming announcement.
Thanks. Based on the first announcement and the fact that security fixes were publicly disclosed I would have thought they would come of close together for exactly the reason you mention. That would have been helpful. I had already found the information about the Widgets extension.