-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: powerpc Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: powerpc Build Daemon (poulenc) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: c327b69b8406bbe3b14165797259d7f4a5256c7e 304618 mediawiki-math_1.15.5-2squeeze2_powerpc.deb Checksums-Sha256: cd055a6f9228c4082e975e0c922a31e308a1231660f20e1de354403e0572736a 304618 mediawiki-math_1.15.5-2squeeze2_powerpc.deb Files: b631dcab374d9fb3cec5b2ad2c6a2b21 304618 web optional mediawiki-math_1.15.5-2squeeze2_powerpc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7n4VAAoJEAEba0y9vvHNW04P/j6lWjgseXaXqRuq11QJJ9ZU 1HwfRFe2u+MTUOpnydRFo8/1Jfl9ABMOmukH3IHRROraZKLOLw/rhYtlLcZ0qyse AgQNRUF8LfBMJlztxbTRvPtvvWHQAhxRfw7A2Quiq9hbsgSRUm23UkxmzZxXDDqu JjaQLkoPBVb0z7o+5LLAmS1BK+qEmoYQYs4rYgHGdvdm8oC+RN0jYjp+3iMy0AQr gbm9A2HNrFJDjg6UYXFQ73So0YO70CO+5k9GjqcZmcgudeJQvJa/NxU78XU9cbvZ Hp8QWGgE02M42jp9rt1CE9wqEidcdwywcAag0bQUG58Bmwi5cjCFDXJJWyR2sxPi xe1dsKR0b3U/ASoiYbLLRGPti89Zg6PrNMu2hodvx4jqq3VeERdaAQ7CMa+zBP+P F/Oa+h0zjjSJyb+vJya1cq2jLZV9/TWpzJGGEGcy2lLoieDIyu+QjpjMB7XmkiDc b8V0rHNxO8EJlAKL6wf0dCIzFM7+4mDwWtKxE0s/d1buACUPplO/fIBb11Sbgv7O ttolUqEmCIlvm0KVZGhthxffUCu1d+RNj1XqU9Nu2OKfcVHYvnxaeE9d67of/Coi qs0QT4iBncq6UA1czd2biwS7ARt13cHLFpT2ZXKTtD2MoMQBwWEEwQK7PQgz+z+o b2QujvXyn0qgSuniIL0m =HiNZ -----END PGP SIGNATURE-----