-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: alpha Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: Debian Build Daemon Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 212c6546938f4f0e799240915a3fbbdab0c719a6 50694 mediawiki-math_1.12.0-2lenny9_alpha.deb Checksums-Sha256: 6b7cc20b5f8f63ecefa92532cf664779f3bb9ff54e890aa74732f8014fe00f19 50694 mediawiki-math_1.12.0-2lenny9_alpha.deb Files: dbd9d50f7b86c7ee2a8c11b8a4891218 50694 web optional mediawiki-math_1.12.0-2lenny9_alpha.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iQIcBAEBCAAGBQJO7noPAAoJEK9qClY5VwHG5rYQAKt3oOyrS0wOfJxdJmDmSTzh wKqoKRf8C2v/THekuFKKqNDrxTT0MVn4XtUGUi2DQMq1Kj8QHTZClGgDy+GlJT8z 9mOBnHkt+uFy+ciVLYSMy0wmm7faxzhTU3BZeehoPzv4Ec8irf6kW9fbGTbSLwWm hb5U6XQjTCmzLD9pHui5vqCKEUzpFoKiqG5pXHW3IDIxtSxOwjzg3uvR5aeAYK8G Sr3b5Ssozb5SE8ksR3v7IYyTTrKyGri8JM9JTIB2mt3xa177OZYyApcq8kd0yLK0 Ad1wfJIJ4t2m9knD1EODwyyzeGu3VK4ntkt8sk8bv8iRLl4HTFV9f0JjC4PYvZiB EQzhKg7TYn1SuK/K6SpzIcOF3fS4k5Opp69uGCchcND4RSksERYGFRyn+VnHXodx pMampPpK0s4cWezdBCnQ3GEw1YwbvUt8ViuHm+tSwa3yIIH5JEO7hJ4igZU54nNi 7DL37xjRzx9mhmeFzNxJ3j4lxe5UmB/zVONPGkHpGvokZkx6d+18h8Otuk1F93wZ KCASmxloWEs09Y/MbxQLHRW8rGiAEneeL+fPV/cfXdra+x5mSkKABY/QPI12aMPF PbwJHeolCea5mZqx08pETJjDhMVtfs1Lml8pdsqVT/t74pjt/iyTN6WOmAARQE6h E7+iceJgKnYRAXY1Dp1z =5lzd -----END PGP SIGNATURE-----