-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: sparc Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: sparc Build Daemon (spontini) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 40af115bbfaaad0bf0c2f5c7255662d75a4a0b23 158948 mediawiki-math_1.12.0-2lenny9_sparc.deb Checksums-Sha256: c120bb91279648f8c3046422742f12d424f3a53856a45e5e1183f102957619ec 158948 mediawiki-math_1.12.0-2lenny9_sparc.deb Files: 1bb37bbf85d322c231899c5d8f174fa0 158948 web optional mediawiki-math_1.12.0-2lenny9_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7nqQAAoJEErIoNUNTAQMrMEQAIHFWZf7t0BBxIUIYsz32zq6 0G/vOCK5nV0fyvC+i4LHJB2CbKpVxb1QGkPiXCCo9O4mrL97jIyjiDKpBgXCxiSO aYXB7Lg9SnKfgli4veAvjfqPL+HSqlNffFun1Tsz9GvDSXdJX3VFV1250yntTPx8 SdGJSWt8YeFCgta6Dfcqw/mNOwHxu7KPwmmC0kyZ9aMecDwn1wMiddFIpvC02xzC sTqisX/sAtFQ83yZT0tMMOT/2JGpy/dXQIgQ6UAtcn2wFyCmZhaaY0TLLh9WcQfX kRLSIDe1j07V3fTkslSNF/BHhrKB3gC+sJqRWk8G6HKOcJg0/ibK6szKJjRFDY0m gxJ+An8X5E3nzE9ySABieSG9Anj78OmedrcQPtRwN4gka8ucAuy8NMgI8KiWRa4o VnhJGS/CDztVN1dLYTdBYs/TFSN4s6bvcbwDfmcV7UY/uzsft5I6f1qEbA214lym +jVTZNapTV5m+LILjRl49kFFqJtRqVZRpPF4sZIc8lQihzxHanlrMBbwKTUmpgmI NyMwsr+s8xJxhDnk7aqDRcCwH4f0oEou4RlYyeSmC2A3f+gRUEzi7HAidLZLENF7 U+l3+7/sWHdfHg9+ievtkdFhateSI61GuFPi8x6+/HtyrJL2DdIdpE+VYuhHFzvg WS5EUH8DWi5nfLQYIV1N =zqcz -----END PGP SIGNATURE-----