-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: armel Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: armel Build Daemon (alwyn) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 116cee1c8a572d07707715a45a996f02c86b93d9 189510 mediawiki-math_1.15.5-2squeeze2_armel.deb Checksums-Sha256: d509ca4c5b8e4f1c7abf56c8e130bc14735723ffbee050a2889301aa4d4fc52b 189510 mediawiki-math_1.15.5-2squeeze2_armel.deb Files: 8429142978d15a03a9a2e535a5aee440 189510 web optional mediawiki-math_1.15.5-2squeeze2_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7n2+AAoJEBRVXZHoMsNVdkEQAI3mcXxpLuiiAFRwA9j2RKWR r3gObN/V1bpnDKdlrpMxqSIKcbMeo2L7ngJJa9ULvkzM7As/4t3f9n8zkVWFuWqO KskKPbcHQAzql1QHOxvJW2PYdkaUbq0JsY6XL3G79HvSxHfciaX7ivu49q2I16zp 0iQlzHdyPSiQ7TAwXgaCXTlxmv+42WdJneEqe4RIJu9yakIjrnbrTkWIUrCDKwzO 5kiJpPJV4NzkWnCoKIgVPv1edLrouH63A8kK2Sep8VovMa6kzR9o8XBl2nTdpo3v FUlDyYSjG9gklInI6Xhx2dMjnrR/Ih9Aqn7ubvFHR+Q4Gwz9/Ilm3WLjeXjy8bKP ZQ6CuTD7wRBqNfKEWnHIZ8uyqxjut+uXdywnNJTYlx+LuhXBunkfC3UD3+Ed/KMV yExZKTyTupUtk/ZsNsyq5dr0pvyaZd8jPybUdphXMVTZ8Ewy47cZgzIYV52YJava Im08nTkaS2iWSIstKkhI9g7GNXzDU4pDkocRc8zT0thwxILTUfzAYlN/8Fdq/wve Nstz6uentFzHaMyT4wuDtqpiDZ4kJ5f41EqV5S9EPQRb5HfRAWhTKwgrJOnnkoJo 4X6DRndnP+r9DOaNMFYbaymqds0N1qaXLjtJIlWXAlxEeh++LxuKM1bxumgXAubk NAzKZSeZg1R33d4xTjeQ =uCPp -----END PGP SIGNATURE-----