-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: ia64 Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: ia64 Build Daemon (caballero) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 352156a069785c2a470651605ef60aef8e1286de 189376 mediawiki-math_1.15.5-2squeeze2_ia64.deb Checksums-Sha256: aac467a67f2e5ea8855a5dd1006e0ed2a1bbed0cbddbfb15db164a1c9e436bd5 189376 mediawiki-math_1.15.5-2squeeze2_ia64.deb Files: 2f6141c5046450f9eb50f5f03fbcf096 189376 web optional mediawiki-math_1.15.5-2squeeze2_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7n0ZAAoJECpy7fAe6lweVEMP/0y6vKE/K1raOzMuV68dPNm2 6oU4P8Wqxg53hhfQEUPrW47r+zDN/SdIVXP6AZNEvNSKD8fShpCW/ZyCblxId81G 9FXggz8Lna9aE42ReONnUR6RO7jhGvAbiPwAFJq3dRoOp6DCY/BWgXB9Vr6ahwSx GIymdeEwBZr/LukMhqkadgCh6LcveQ5/ejSRmFVmGtZeCRJe45OZd5aUuKCkVFL1 +rak/4PmJUdTQldSEqr6gh00wMrbke1W65MAJ25TJ+R6gWEDi7to8Ef3eo7G0yce 1vuIgtMuNgqC+tFaWm147+Y5u3qz55jNPG6uuQyZ8kYLYMMg3lAiy6UqOZMs9jbX w211vhXaKC9C1tYodQXAVCQlRYMH8jYodUo8P2H1dVT0Cn8+nlE7j+RQKzphsrNW KVvidPCtyJYlzxX0EaoUpf1Gysv8zYUG1RwIhyu3/BpKN4odRGg+RDJZAxKObesH 1cBHgde0iIGVyNAKV0J2m05ZE/lCHTJ8Cj09CxbTESi15lCSSj/EcZwC/CWaWAwo LBiNARwP7seRpc2Lr9xmgLjFlpVx+gZAtYlo/QXvLuUpr2fGqN+6mAtO2x802GF3 KlRebOyRzvNoOQmAY0hifdhMgllPS2TzNxLyqXfE1Le7grgTu9uBLuesSUylS5PF nGeUKbnsbs1kyuqHnoxz =LH2l -----END PGP SIGNATURE-----