-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: s390 Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: s390/s390x Build Daemon (zandonai) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 094aa9a37ad03cb619402164679c349d3c7e266b 188938 mediawiki-math_1.15.5-2squeeze2_s390.deb Checksums-Sha256: 7b1217c86d585abd5a9ffc79376dcb6dc01487b4eacd98daf5668e025cfe645a 188938 mediawiki-math_1.15.5-2squeeze2_s390.deb Files: f29b74fb4d948702a54c8abc589eca6a 188938 web optional mediawiki-math_1.15.5-2squeeze2_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7n2BAAoJELWkVFx3JxH3FqIP/1XT0O1/3Y80ZF43jCwU+rTP CRsdl0tesjPYqgKJkZF1DINyw8JYuA28BJuJ4IaYwz9xIWgu0or2NG47GTFc+Ebf kftm8MR/YZKlfXQ3K9ujP6wJIS1ObqjcOsRWcwUqXx3M2v/UPH9x3QDOkRkTj5SA K8fs8+PPsFCPlUk4+oM03pSmDYUBsGLYOGqTxVi+xqXiLg8wNOJIWHZlvadDGMNW zOXEo8wHuApLoQrshIxLNQFRmZFZuW2ZIFpOXOM5/UJDa2XbhjhqKlV40cSeDJM8 nnJr3k49Um2Dwa146H7fFLXGcA9pFGW0CXWggRbdEhABGX2XVoSXs1qop6QJC2JP ur8nVE36ZliiC8qNJ1Mt0UtWBdzqTwz5z2ohUKs4UeL1JbZE1Xe+3/QA6TLClqc5 RvNBoJFVtDG8xqqmIsgGxikdBRPTIfnDDyCmeikt4cU/knczRm79GN+s+c9c4CyK 9Nz/XxgzDDR8TdhZVJZJvZ/U7yscN6NNOMOHXWdGPRi/LQ5lH2U2RKtyBy4MR/za Z85kR4/u17su4ajMEY0dalidRorXtJegsnlRUuKSS/18LTBDjJTMtrKH2HJtCEZ4 0T25EsQk/vXZcTRUPgwTnlPeN7z31L7Rvx6uEbT61xo1TjEtsJZKHa6+xbdmvQJ/ JJwEE7pcA8Mh0zprckb3 =ytLH -----END PGP SIGNATURE-----