-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Dec 2011 23:17:47 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: mipsel Version: 1:1.15.5-2squeeze2 Distribution: squeeze-security Urgency: low Maintainer: mipsel Build Daemon (rem) Changed-By: Jonathan Wiltshire Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 650434 Changes: mediawiki (1:1.15.5-2squeeze2) stable-security; urgency=low . * Security fixes from upstream (Closes: #650434): CVE-2011-4360 - page titles on private wikis could be exposed bypassing different page ids to index.php CVE-2011-4361 - action=ajax requests were dispatched to the relevant function without any read permission checks being done CVE-2011-1578 - XSS for IE <= 6 CVE-2011-1579 - CSS validation error in wikitext parser CVE-2011-1580 - access control checks on transwiki import feature CVE-2011-1587 - fix incomplete patch for CVE-2011-1578 Checksums-Sha1: cc1d5fce9c07eae862d83900db69d130e69405d0 189548 mediawiki-math_1.15.5-2squeeze2_mipsel.deb Checksums-Sha256: 023cc698f27169d4970c3482b412d6611be163fb455292d36e3b5da90ee6689c 189548 mediawiki-math_1.15.5-2squeeze2_mipsel.deb Files: f48ed727f81eb925d9fd6a8b5ea7add5 189548 web optional mediawiki-math_1.15.5-2squeeze2_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJO7rWwAAoJEAzzgj1nKIEuplgQANk7c2NotjxLrZTPmQrBYaB+ Rqwd+fGahvWyHdM9TPS7qBrylDyrGO+NdOhAFrh6TLHRfYchSICUSJUBz5hvZ/+p A/WZopULdoj42WFS2FjmjGAz5GbU916PCtn/ovgFgp9VKzlxxH/w1KRN59G45OkA DffAnuWpAbspbHq0vqqgs5qnBOGVjtY8rNEpFznvNgHxhaDZm8l7qxIH2ZfNwWAW F/xD5vwaffMj12/KGiPU+BiZQmg2Wf7yeK7q62oHhuvblz2OqD5W4NE2Fd721xgj ji4DE3hDS7kG2PfEM/IPT4izRgrkiM7t+v5qMpPGYYZyXdY14L0kx0cZx8tNxo40 MlhW6ebpeZeR1DaTA4tsRfLxCY9i6uCglcbQd2gX+LkuWOTsmU70XODIZSBslgQY PueaXgZH0hyfKPUExs4u9H40mjjkDeJzCQN4j3hdni5tKB/2opOeXB7SulRfQvGS SumfWVdCFJJRIa6WMjDYlneREv0rxBPnzByHbZnPWO+7S/y2S96WY4sUdru73Wxm CytFoqAZDwopd45Z5Z1+c/8j13w9Au8gEF2ecsRFNEluB1afHA6jgEj8qLlwylnI tYmhOzcQoOeffg34yZ3lUU3MAGPW13vcE4fIo24bJTka83GaxtVgSYIGBX3EUZFR jhBuZFeezToRTznsX3E/ =4fCa -----END PGP SIGNATURE-----