-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: kfreebsd-amd64 Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: kfreebsd-amd64 Build Daemon (fasch) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: a487bbe99749e8c21b993b8b4c760003b762089e 318732 mediawiki-math_1.15.5-2squeeze2_kfreebsd-amd64.deb Checksums-Sha256: a66cfe7006da91d2480dfe1dddd74d8a733b6df7edff5be84412dca8edaaf6e0 318732 mediawiki-math_1.15.5-2squeeze2_kfreebsd-amd64.deb Files: 165ecf4830072044d108c1f59da12a8c 318732 web optional mediawiki-math_1.15.5-2squeeze2_kfreebsd-amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/kFreeBSD) iQIcBAEBAgAGBQJO79yMAAoJELV0nKsIaKwS7DQP/11+96CTPCgUxfIV6h76igtn UfOwiSHhoUvisqhKqZKowy+O0N33aRMdQn6ZpOtOPZopRP/0lsiwrnjWXH2VjYQp CpnXFoaBqSDEJYUkCdxjpbmVGLfrup2QX81+wgj6/9vMGk0s5+oAroIk15lEswaG 6WNPgttN1qUEaiW8p2isBf47bmi9gJs0hnHiNWQjIn04u/JH6H+6NY5v3MDssn9H RhE7bOgxVIF3tTT0oJ9blFMoW7XVLYKUH5xQ/SSfeD/wElINyaQrskkkOc/g09Oj fBlbGuFQN6ZUdxz9F/JBNeZv/HIldGo6lLvWSDAjgdusdGNaazIltVVPUdXesqOf Q7yDLA/POL3njj5qwZwSTJPpsxREEFInJ+rg3Ws4Nm7amjClqzoryhlGvSyory/P glcdvPgJ6oc6k+VeN+wR5ezap7NTyDlMesJQWxZxT2nlGpyioNG5x8/+eIX2niaY R71ptVVQu4OugBO+2z8REwZFhHAAdJ0An1nArdbmMMxx22zbmwePcDzk9R8azT2x xhTmH/J06k5TCFLJ5XQQlYfRGfgxLsKhEPeDL/q48aR2bByVFwHimwSfQmELst1I g66dS0ctajwtptNdLIq9GbOeouhm0gkzYzZMn+Ihh7hC1nys2XdVTtq6LFViUiH1 0Inura7Qyk9Bx3r59ixj =xkYw -----END PGP SIGNATURE-----