-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: i386 Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: i386 Build Daemon Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 5e21d2fd5411ed9652ee83e8ba0062a28e92e12b 139646 mediawiki-math_1.12.0-2lenny9_i386.deb Checksums-Sha256: 4969ea6a9e6143814c5edfd605ad62eabc52e5d58b7ab1c8162b0fa683ea1ba7 139646 mediawiki-math_1.12.0-2lenny9_i386.deb Files: f1deb6f478b2a53c799010ef4d138276 139646 web optional mediawiki-math_1.12.0-2lenny9_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7sObAAoJECkckSfIPUEsRgoP/1I4DvERT0V/gZLU4b1xmYbr 48C3hKi2ZGjkjbFp2yIk2tvUgiNb3mkK1H59cv8XFbpzqKEk79MweeODoI9IRt0t 13RKWSp44IsvUozv2NDJe3DKh1KGgFMkpAE+41Y5Xer4OoVIb36DwJSC9bSrJTUQ EFiw6G7nRbyeF+V8d4+sm/qTty6bQHVDizTxueDIO1MToKHTB3Cf3EdqleHO4Oks sbEyR8LgkgKNz6Gy2eGtCtApZLbmvTV1h29uvu5QNYZ7w4/PXdZ+Xu0D0LSK2ybd zVyM6jz19v70GUWNkuJl/X+3hHjoA5NI7MsgWjHNdFXSIPhck8lvNnN2GGvMv3tZ 6TEKPjiMtFjSZX4/yud1us36UCf12fdjanUYE6Y3M28Hyk+F111w8hF+X3JfAhUt dFcJULqh9pt608fpVnVBBxlhifpEn8IjnkghkMnHNmShwiaUjq5p3ao6bi0qCTuv zS6pKG1WtrzDaJ4x7f0xL521a8BL36ekFomizRxFOFfgkiE2ACXi39f1ovM1bKTb 2rD8ikEBDR9/MwUvQSQvXlNlHJhbCJ5IjudGfYGBGq7gl91MKvvYSXVdArhWZJlb Z5yJu09IP/yA6z4J3QyXL+De7nkho+wOSuPrHDxlUQPMhIadhWoxlrOQANRyZbUN ILqKPD6MFGOOBGmaTGKg =71kt -----END PGP SIGNATURE-----