-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: mipsel Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: mipsel Build Daemon (rem) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 9568d1483f5d341a41180e2648abc2b37bd0fdf5 50730 mediawiki-math_1.12.0-2lenny9_mipsel.deb Checksums-Sha256: d5f5414431e571f1f7fbdf310353f202f5bd0770602430f306a55a13a099a8d7 50730 mediawiki-math_1.12.0-2lenny9_mipsel.deb Files: 9d640e78bfdc05a0a51d3ac7b5a29649 50730 web optional mediawiki-math_1.12.0-2lenny9_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7qm6AAoJEAzzgj1nKIEulHEQAIeAJ9pc1zqR1NeZyf4Ma//I 2wu7BVzMYRAC7UUdhhHBPcmRdCYr06e2iHCJQTQhE7FPd0+VdcPWCcfEOcDXcg0p L8CdJBOkvpa5kqbEg0UY7X9HIELfLD8JmifxC3s+IVOgN9WAfO33OKjJ2iabKWHu vLdoeHBIDqo6uQdABMmtt0P8VJPH1UH0VlfhlicAJPKfpNFG6XHJ0UtDDnPZKGT6 TbfJeOwi7dywWtiyggXkPcJXvdDgk+SpBuGKCSmmFk9LXmYvmChuVFUXYOMxBYoB 60BaKg5tI8qoCfaq/irNm7FAUKejroiJyugufCv44EE3vOOrZuOiVa6l8mUHwmYR C0GgBCU0KN5K6+3AP279khK73XUTAY53UM7FrqhXMqKUWycteYxqqK18IU2hGGD0 aeEVEGVQS1F+mVoPtWCwOTE9JPXw1Zj/nYMfUfiPEoZ3WECYWdZQAKxO4RPTst1V h5k9j1KjeKRfOeAhcDroUeIXG5FLAyz9+E9OQ+cVkxl4cS2CO7iHzwuTOyo9WEH0 awMb+YQ/QEJuuppsdKCFMKidrvA9tq1eXAt4D8zpgDejCizSc82pEz+byN9KaYOR C2xjle+3EOk/7lgn1eE+gBXnQoF2iq0Dr4ssiuruFzmE3klUUvTmNEZLEjlOfSmb LXI7Tw34XU+rDhCBY6Ry =Ud24 -----END PGP SIGNATURE-----