-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: powerpc Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: powerpc Build Daemon (poulenc) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 215a26bb4392771a46cc2374d599f5b9b56bd0fa 163180 mediawiki-math_1.12.0-2lenny9_powerpc.deb Checksums-Sha256: cb64afb233fdcfdb0c5cf4fad62ebd85d17df611989dfde3dd5d2c642c9339de 163180 mediawiki-math_1.12.0-2lenny9_powerpc.deb Files: 274955b0dd8811530b45bc077c842510 163180 web optional mediawiki-math_1.12.0-2lenny9_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7nvgAAoJEAEba0y9vvHN0zUP/RkVQHPO1EBtNW0lTZmV2KLa yvt4dKJssfKc/5/mkz/sC7KFwlJSBbP/IqlfkUOBewbJ4KySkCYNj3Ufe5BX7WWL catPsqPbc+sWlG80DI3MreGQ0AXdABp3IqHe8B9fa60A6H3kIeEopTxD+V4vKFwS HImdFtr83M4/jZCH5X+7gS0s0z6uDug9e2jNImM251ez9gr9fR9nTPyfQo2GhKEa B9+I3csR60aRjhbxmRyswj7LTwy4aDDrjmkrv+Ox75HPswJ2goAb8yijUSVmMAcZ NHf7id42yTg4jGCAbXLmgOYNRjnuPtRmE46tss+3tLWRSshpT7l25KaF5UyKyzVm yip+czxcypccRWQS2ScDIgtxi3/DOSvPd5uRDcyUtJycxLTO9rx2U1qVS4TVIPgN W5owfVJHtIKaeoYrMOY+g+OCV9AwadydFRd2A+9iy78Wr/Bs2h7X+K27QomIroh2 Njk6D2yjcSkn9XmMjtgbGF8NzeVLLrLAZSH27qQdP0j23AEzIf0aACfBLkjhDY3z G3zU4DTEFoFT+DePLaTlWoLOPdQ5dqvtORwt72QG+asJdP++qm2l9s+fztE/dTu/ 7/bzSFj5ljyv2zw560hVdS14VIzROgKFP1V4nRAGlzeRK/fX5rHuv385N1AOcyE/ Ms83n40jFeTZYisF2bqS =/zMR -----END PGP SIGNATURE-----