-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:19:40 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: ia64 Version: 1:1.12.0-2lenny9 Distribution: lenny-security Urgency: low Maintainer: ia64 Build Daemon (caballero) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.12.0-2lenny9) oldstable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 72cb70fa2c55ea7feff25a47b64a77932aaa8777 50688 mediawiki-math_1.12.0-2lenny9_ia64.deb Checksums-Sha256: fcf094a208f4f821a5ff9b549414aeb6824368724ae5dabc2b44f2eb6323d5f3 50688 mediawiki-math_1.12.0-2lenny9_ia64.deb Files: f34934cb02a75f5b8a629248d370f652 50688 web optional mediawiki-math_1.12.0-2lenny9_ia64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7nm1AAoJECpy7fAe6lweyAEP/3w8L68YWoZh972MBBPKj+8b EkdGyYiWMI8eFBRfdP97TGV87xuZeRhlPYYJnxe+wxV2OGdwWqeDkhCCeHXAMmJ2 M+UhrdfpW3rEIQ3Le+HzIjZMhRN9tbzt8Fb/MyU2MjLCWM62vbAwcpB13hys1A59 8r0QNuKAMgmv0rrpVQmDfrDfqjBhsgzyblsTAur5eFk+5LGrPKN1cgRnawmsYXfg QtJqIGU+xO8W84Cd3iiyOBxkTdR6VBfjzwJVWN8uAe7YuE161kQGqt3DrcRoVp0b YCz3klDB3fgQMFG8TSurvqkFplLZH7DYN6yp1z01bvq7MpHkF2kByp0xBE15XMDU JDBHJMrPmdEVWcF0AWQUFTCny6lJwrn9VbG6ySed9ejWxxVAq7ccVtA5pENSK0Za A1X6+Z2EpcS+43/gIM/aTn0bFF0dFvJ0BoJV2557mgMqwc0fYBHKuFJ4SADmNPRY 7V0+zAqbvnmBFoM4RWsdf0gx2RSav0cNowhusI96kJCN9kcA+9MeNyPHTZ87GNVj 9SRQEd7XtCsMNbm0+V0+KVcIgRKnsA/bnEHnw2Mfv7KhU3oz2k4DGwcHzRPigLs7 jD3ivbbXCbgzzYWBQKned6TC2sfUFeto+8slWZGucJXV8jIPZf0o1PzxTR1plRqL PhPMp5sFoa9X2VW3R4in =+gl2 -----END PGP SIGNATURE-----