Accepted mediawiki 1:1.12.0-2lenny4 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 15 Mar 2010 14:29:43 -0500
Source: mediawiki
Binary: mediawiki mediawiki-math
Architecture: source all amd64
Version: 1:1.12.0-2lenny4
Distribution: stable-security
Urgency: high
Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org>
Changed-By: Romain Beauxis <toots@rastageeks.org>
Description:
mediawiki - website engine for collaborative work
mediawiki-math - math rendering plugin for MediaWiki
Changes:
mediawiki (1:1.12.0-2lenny4) stable-security; urgency=high
.
* Security upload. Fixes two security issue:
"A CSS validation issue was discovered which allows
editors to display external images in wiki pages.
This is a privacy concern on public wikis, since a
malicious user may link to an image on a server they
control, which would allow that attacker to gather IP
addresses and other information from users of the public
wiki. All sites running publicly-editable MediaWiki
installations are advised to upgrade.
.
A data leakage vulnerability was discovered in thumb.php which affects
wikis which restrict access to private files using img_auth.php, or
some similar scheme. All versions of MediaWiki since 1.5 are affected."
* Backported patches from upstream release, via the Ubuntu package.
Checksums-Sha1:
c62ce90f3a2750b34300bbb8939e94746286e807 1549 mediawiki_1.12.0-2lenny4.dsc
4464320fe98ad0137b3536518c1c8831f8e751a9 61443 mediawiki_1.12.0-2lenny4.diff.gz
5f0078031284dd72904411fd523da5920dac6d42 7231304 mediawiki_1.12.0-2lenny4_all.deb
b7bfb344efeaeec0291cd3ac84fd54f44d6ab02a 156990 mediawiki-math_1.12.0-2lenny4_amd64.deb
Checksums-Sha256:
c08f822f19ba70479c2f80dfc5657470965268ac2e5074e42547615abc9c9982 1549 mediawiki_1.12.0-2lenny4.dsc
f206de71b21c5233cd99e52713f15b4ba848b69b856caabc623fa133ec1be25e 61443 mediawiki_1.12.0-2lenny4.diff.gz
84e03f877ac5b4c1961e7b5ed08618a2d1828fe470e4d759eabb655f89105ffd 7231304 mediawiki_1.12.0-2lenny4_all.deb
5e779c52c9bd60ab7f3452e6affe4d7f0bd5915a234f2a713207db915ff178d7 156990 mediawiki-math_1.12.0-2lenny4_amd64.deb
Files:
cdd8466f627db0d230059bea9dc3bffa 1549 web optional mediawiki_1.12.0-2lenny4.dsc
fe024a07a1555b8aa813183b98de41da 61443 web optional mediawiki_1.12.0-2lenny4.diff.gz
ec3604e69ac212e506df83c93e8fec14 7231304 web optional mediawiki_1.12.0-2lenny4_all.deb
4a889dd13d45f38b3594a2dd47e9b59e 156990 web optional mediawiki-math_1.12.0-2lenny4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQEcBAEBAgAGBQJLpQISAAoJEAC5aaocqV0Z/FAIAKp+0/v6OwZsrGN8wLtVW2Hy
znstZhBUGaMvy5wXNz4DsI5Iu4cRG8RWx4rFG1EqhZLQkOnnnFYmupkcLHxnmnA9
jo8lTEKd7vluKHQ5OYqBdwaC5TaVSN0KL/htEtgueB+hFPBBSie7pgkGQmRAikka
jGsT261UiQMquFOeA/5Y4AZ7FGoKG4G40gMRd2fVdK2SAm0J8CtvP8HtYEUHwK0J
56LjsggnjTMfSl3veBjiol1YKTfRkgVKt2RX1ntSYWfsOoX5/4A9WitheRkbIa2V
EvI/gzUv8eodtMNuJw9H58gGk7qYiwQdKCyfb/NiZQOdgXXGCGe6aJgY3QskBWM=
=hskJ
-----END PGP SIGNATURE-----
Accepted:
mediawiki-math_1.12.0-2lenny4_amd64.deb
to main/m/mediawiki/mediawiki-math_1.12.0-2lenny4_amd64.deb
mediawiki_1.12.0-2lenny4.diff.gz
to main/m/mediawiki/mediawiki_1.12.0-2lenny4.diff.gz
mediawiki_1.12.0-2lenny4.dsc
to main/m/mediawiki/mediawiki_1.12.0-2lenny4.dsc
mediawiki_1.12.0-2lenny4_all.deb
to main/m/mediawiki/mediawiki_1.12.0-2lenny4_all.deb
Reply to: