-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: mips Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: Debian Build Daemon Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: c56fff7acb6c47455c8fe888d3cb07d9853053ca 189540 mediawiki-math_1.15.5-2squeeze2_mips.deb Checksums-Sha256: c4e080e50c8f467ac21b36cb7128706c708647db5157b0ea5bdced075d938982 189540 mediawiki-math_1.15.5-2squeeze2_mips.deb Files: d2f3d482ca252cdd4ce6a13c270c8d8b 189540 web optional mediawiki-math_1.15.5-2squeeze2_mips.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7oaXAAoJEKAUSqXS1Z2aEsoQAJiR9tOITGWuj+EZxVqHly/j FKtlGzSKYlKXyX5E9RvxGDs2myf+zZ4HO5WpyQ5wUql/tGbx+f7ILAFksCS2FCwc qt8alGMsmarR0XkekpjbZumhag5PTLgVeqIG22OSp2LWokny/7GApEH/TqpoOSLG 0Z5XwG+jo5lD8xmXZqH9ICkUCf1e6asvjNr6ztJmQTqzwxAIw82dQuzBrD6JkrOE W1Jb/zT0ELsIh1UUtx+TYOUso9p4fKvOdIzoHAwloCdPMBnmmXi6GkBcQ2F8CAog 6gn744lAPt3gbNiafDDgAvKAUESfVxIMGVHK5q3oVYwWRLI0un1WkwGETbuUqvrb xr62y191XND50fKI7HYRT2ZKMzp+fXJ4fPlX/HwLoYF2cz9pxP5MNuiDLcTEbnRH kQQMQoPbkEUi4k6FDqZYAib2Ac7me/tUlQq0oRLIRK1J/42JlT5FvoKP0oQ/Yo6Z 0Vnl4ovT3VR/3wYacRdKxJ2BNK2Z4VDGGcosYtjx3Bz4pN7d4F+2lUVN3l4sAF3q z8iPG4QWYxbyy3S/EDloNQ8XGWmf9+jzkZtC7OTow9BEHbqdIziCrYdK/iWtmix3 SWtayDgCHxgnAMkUphjzHzIXrpZwNqQGz0KmNsU0/dKJtGprAgyhNC0yfFIfh9vL FdEMF8vbz9cRj5IA1FXu =magb -----END PGP SIGNATURE-----