-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 17 Dec 2010 23:32:46 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: source all amd64 Version: 1:1.12.0-2lenny6 Distribution: stable Urgency: high Maintainer: Mediawiki Maintenance Team Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 585918 590669 591382 Changes: mediawiki (1:1.12.0-2lenny6) stable; urgency=high . * Stable upload. Closes: #591382 * Fixed CSRF vulnerability in "e-mail me my password", "create account" and "create by e-mail" features of [[Special:Userlogin]]. CVE-2010-1648 * Fixed XSS vulnerability affecting IE clients only, due to a CSS validation issue. CVE-2010-1647 (Closes: #585918) * Fixed an XSS vulnerability in profileinfo.php for installations with $wgEnableProfileInfo = true (false by default) (Closes: #590669) Checksums-Sha1: 43a4da5649c6c60d8a392b98907696b899e3cfe2 1895 mediawiki_1.12.0-2lenny6.dsc 8cae2ed164a5b7c34c89ded43b7c76d05afe306c 67414 mediawiki_1.12.0-2lenny6.diff.gz 67a704f6debb1d31bc4dd5e99fc540a2396868e7 7229428 mediawiki_1.12.0-2lenny6_all.deb c4d033013401861242b45480e220c60445fc69c6 157458 mediawiki-math_1.12.0-2lenny6_amd64.deb Checksums-Sha256: 3522e51eff5c8881809564398ee1bb5b9fc54db786fb5d51f087f35f38cfec63 1895 mediawiki_1.12.0-2lenny6.dsc d3fed631d4f4e6d92c6c7a598481e575cc4fe8c2a7157b9a0cbb44e9bbd66c04 67414 mediawiki_1.12.0-2lenny6.diff.gz 2d3db39ce7925fc6c78ec8921900ad99788b7cdf0b1bf63e7e2f93354063a90d 7229428 mediawiki_1.12.0-2lenny6_all.deb e3a908fdd9535be5a615090c1b77993896e321de92409ef504925db47317784c 157458 mediawiki-math_1.12.0-2lenny6_amd64.deb Files: 90dc6f497eba201a970141c53427d68c 1895 web optional mediawiki_1.12.0-2lenny6.dsc fc840b059b2785ff1f38a03b0d93cbbb 67414 web optional mediawiki_1.12.0-2lenny6.diff.gz 1e5a3ee0354b601cd13e5b6bd87db6c0 7229428 web optional mediawiki_1.12.0-2lenny6_all.deb f0cee15142a92b3af49184883f26c7e0 157458 web optional mediawiki-math_1.12.0-2lenny6_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJNC/qPAAoJEFOUR53TUkxR2o4P/iIDvnFeo/yt0MOX+11W2mXh aMgPgmGUU9sCikyy5moKmIejYV+KYCw7tjIEEem7DaK3RUyDecVggzeyC7oG8yt9 5g67opT2usok9Lo3ereFMYEWZLk0arv0exa9iCRrZjwgPXu25yWcEfPQNYOBjYnJ m1je7k+IQpdT3nEJv05UPAndCGtGk0YEjTpd/GPYWSGptUYqjQcGEl8qXQANt050 486g/ZT3ND5RaByxVbOiGORVEMUoI7hmYY7hs3x/lWk5PfBX9nZKZQK7wmEqSq7s 7inP9d6MPDwjaq4hG4xfiHOGRrqHlEzHtOuXu81553aNdMUcryPEiPfMPJKp8MXj FSwtFd9Uz3URskU8gRwiQ33hkxlNh0BCG2COhm6tuHFmsJZjuEkpJvssT8I++82C zzCmwHbvc+RSqgQRm0XfhDTqudrythLFjAI/ZMUKZyvk3xkgNlWq1AsaatYVK3M3 A799Ad4YQNcIcmd/8Nv42J+kVt/uq3xZzzBYJ4blqJVL9a2xYs3lx4S9Q9tMSr+y fwLjzV7BKNsd0jHqWL/Bp+htRuEpyJOl68kxtEGZCbXQfjl6CARwzuj7C/2rvlJ3 cjbIMDd75kOtpgt0bNgh0jSSik4OUCqtpPLgY6WOQTjoEFsnPNgGshcuETdsRjOM QsizlKK9fxuM94zWplB2 =4BtY -----END PGP SIGNATURE-----