-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: mips Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: Debian Build Daemon Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 92d15e4759a94283cfb12c5830c68b90b9b53211 50726 mediawiki-math_1.12.0-2lenny9_mips.deb Checksums-Sha256: 58e08b4d61f495567d88d12ab6d463b6fe1037bca7f89253b900b1a54a167453 50726 mediawiki-math_1.12.0-2lenny9_mips.deb Files: 7506b7cbb16061ba0bf419b7f3c77f64 50726 web optional mediawiki-math_1.12.0-2lenny9_mips.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7oTUAAoJEKAUSqXS1Z2a6xQP/1RApNEWjW92iGTHM8uQGuSj 3hhLQD0bCoeh7qg9s8RKiPrzJRsXUvmViPPLUtlWfGEu+jyayOpE+xvOw31ZjCL2 QLqdyPHuBv+x2A/apLfIpg3+P3UX++iWaQUlkkf5ip1rJWXw7xQ3B01rb4fZ8iPv vqyEYo0AY2b9+xd5q1rSUW/G5KSv8hyMkkQ1ow8uIZnW/Jhp95cGykEe8BzNbDOp 2gHYC3w0YyQwTLVgkZRWfgOaus/i0jFAOPUKlYTB/eO8So+FynRWUuM6mepGvwhu ADK1z+91418hYjEv0AVVh0xCcOysz8fTM+GfcNGOJwPfWNty9D2hLDYYC81WzKaf 8pCDTvRYDARfcE2n05k6Pjq0hss+hLo+1qD4M5IQRZ9wYCzNzGnwM5yaIIJzqnuz YF+57BmAh2dAvtkjz7N6FHqwBLanvDV/VWkX3svVLw67EZKVOS35F6YQeRVfTf+N /Bg9KGs2kjx+psAlG3xlKtQTh0IUY5Zcp/iKt1RqLABzHoZ7E/ZAOc88KUBj1/Nc tELnsIwVGjFq/X2dQzfqw0wQD6Fw8/Zw2r8AftaP0EyWU+M41PQvLFJRyAj5dk0q yFI+r2wWcq3eOObI/G2PYzaFbB12glZbFnsxSRBSDEv+1OEteB+BCfG7mHvzWsln 0hbdNVumN82hMtrz1uZx =/K1i -----END PGP SIGNATURE-----