-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: i386 Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: i386 Build Daemon Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: 4debe0666ef88f7daf461c9642319ef5a25163fa 282232 mediawiki-math_1.15.5-2squeeze2_i386.deb Checksums-Sha256: 4e845065ac82f7086cc84fdf22a0d6a922c596b96f6cd31b914d5dddc8c62b74 282232 mediawiki-math_1.15.5-2squeeze2_i386.deb Files: ece03ede0eef22401214e3440deb2bd6 282232 web optional mediawiki-math_1.15.5-2squeeze2_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7sMsAAoJECkckSfIPUEs2AsP/AwDR2IlgWy0pG7tzoQQjlrH QNBby+K+mB14Zdib+cbjoGxA3qJVsGfWbMxzY5BHNOZ1nmXbduaHpaOSWrQC8Chv Ck510VmvNxed+s5dTl5BP4FhI8LKFDSMpg0HXibZfxRC94/GKr7FiRnfxdkvGg5Z E3kgywqqeDBFJHQoYOWLiiBCHQ+RRikx+G5D4aP9QxswxuIY/0XfMRt/IL0OVkor o1BcVIeIqYf9vokffcRaPynE2HU6SigXoUPvBzCmmawJ/nvXymdAsb13nWXA4xw0 BcYePBuE59qJ2lbFY0NiSldJcmsM26KHVclimSoDCRHqSAiW9DKJTNBCId0Stewz sw9nROegdVonLwFy1ZeJTngcQTfEPeJzhJPwnayKj7q8HmkivSXUsb3q2WGfmGoO CXXpUmK0iDyYkXRgS5kNRXSem1fjEp2UmISKdLSmrNMW1Wcg/55+Ui/OvvIeqlWM yZjBUa2ERI1u9GqN88vzF4Pe15l0GEX2OVQExU8WHMxhEqrGrQdR+lhrWLFdbboW nmWclKpfqyP5FG23fZ4qfq4EndCC6SvavFtMp/tuQ5qNC/mTVR8o+3tOxj71llbb ceYoMWzQyXr6y4UjYYHL8fb1Kt7ZyiOLpO0AB9i67f9sHcFlR/79ZdlyFE18gPAx fU66cbvq7X3P0MFqEylx =mfXz -----END PGP SIGNATURE-----