-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: sparc Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: sparc Build Daemon (spontini) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 0290a7deb8837b1cc812ce200634885d390caffa 302458 mediawiki-math_1.15.5-2squeeze2_sparc.deb Checksums-Sha256: 7cf203493539216043c6e0b18b1d6bdd8ddf5e8b8aa1064db6a61d3e7f2194be 302458 mediawiki-math_1.15.5-2squeeze2_sparc.deb Files: 2dbc073cc9781db3d579af1ec49bfe12 302458 web optional mediawiki-math_1.15.5-2squeeze2_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7oICAAoJEErIoNUNTAQMarAQAIo0iB1PqT1CFZOLUWj6HLFf Q721ZCju7KBkyBFc+PGBaZyi+oarlHvCjB6sycl00qOV3Zpx1FJO76QL6nLroc+y FAB9U8AbWDmuG7/BZjOFODKlEKEqyFVaJ/4LMHMwaNjOeFOqAs3V6stZ2jgMyjbm VF47adhnywUVQMA9fkssMIDbQiivvjXUp4ofTmh93tMg2R7v6nqUbS0WjX0grcAL EXZAK7iDMoT0ON3TZ8MX2IvsyBauVmnrbANxOPImb0PQKm9cSbYit/J4jQGxfxPG PTfT6Yhj4+0P5JuUFi+zm/HM+dLMZN7VoJk+CmpvUhrdxm2MvkMbePQQ2mRClgsX nPjOCBK7rkfFF3G0ylkvunR3aHxqSNta+3AS64E6FQDlhIOPXIYdnKfFsAP1jLGF saLI5r1x/bXf0mXqxd2rVaxdbz8IZ/MyfTpIbXTbCBvF76ei5LTP3kmTj8vYzgAw 4pEVWgHJUT9j4JfvD4B7QhGT3DHziVA87VdwlwUgineCBsifNd72ebhxtvbcZw6X 605bXAUYYAczzmIeKLwfXGpxppjuFg3tXDCtec43LttmI6gADVaWTZqh86S8SQei EEFf/ohKlbLLRGF+rDgDDtd1UZRvUZ48UE4+jZfg7Arma9BpUFKCkVmgg/dPpgsq /QTcM5B9QjLa+kusT1fp =71ST -----END PGP SIGNATURE-----