-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 12 Dec 2019 14:53:50 -0800 Source: mediawiki Binary: mediawiki mediawiki-classes Architecture: source all Version: 1:1.27.7-1~deb9u3 Distribution: stretch-security Urgency: medium Maintainer: Kunal Mehta <legoktm@member.fsf.org> Changed-By: Kunal Mehta <legoktm@debian.org> Description: mediawiki - website engine for collaborative work mediawiki-classes - website engine for collaborative work - standalone classes Changes: mediawiki (1:1.27.7-1~deb9u3) stretch-security; urgency=medium . * Fix CVE-2019-19709, backported from upstream * Disable personal and sitewide CSS/JS on Special:PasswordReset as a hardening measure, backported from upstream Checksums-Sha1: 0a39331ff3049be9331390d59ab3435ee7314b39 2249 mediawiki_1.27.7-1~deb9u3.dsc 0324f2837366f156fc38e4f64d7707d0a60cfd35 72332 mediawiki_1.27.7-1~deb9u3.debian.tar.xz 1d70853076d1d469351d8e4439397eb2897a7307 406528 mediawiki-classes_1.27.7-1~deb9u3_all.deb 0df2d7ffaa85faca00ae14a5c5052a39c7674f38 20980536 mediawiki_1.27.7-1~deb9u3_all.deb 3f6b5865910e1062bebe39d522702a21a5af6f0c 6928 mediawiki_1.27.7-1~deb9u3_amd64.buildinfo Checksums-Sha256: 48330bf754b13f0f36d826c05bced5a65dfe852810b55ce580a05b3bb45ca798 2249 mediawiki_1.27.7-1~deb9u3.dsc 01f1bdbf1bdd032121fe97dc72ef46f075c7a1fde2977f108c9301281a43cdde 72332 mediawiki_1.27.7-1~deb9u3.debian.tar.xz de59500e11aa8ea5678c787da7039f6adb2eb0a8640097eec9291d9a30abd312 406528 mediawiki-classes_1.27.7-1~deb9u3_all.deb 8d5a86ae70cea011b2e1491706fe2fbbb37f8e5e0c4838e53efd3e83aad078c0 20980536 mediawiki_1.27.7-1~deb9u3_all.deb 30d0d7a8653a89e41fb4d0a0a61cb892be4e45ffbc661d1c7af032a34037a400 6928 mediawiki_1.27.7-1~deb9u3_amd64.buildinfo Files: fb3b34b5083d061c3518ab477b2046ed 2249 web optional mediawiki_1.27.7-1~deb9u3.dsc 90adbeaf93d761676f47da3b272d0291 72332 web optional mediawiki_1.27.7-1~deb9u3.debian.tar.xz 422c8081f9099a7ab64dd91b4dcc979c 406528 web optional mediawiki-classes_1.27.7-1~deb9u3_all.deb 4e01d6f2bd479baebc13de2a1d49258d 20980536 web optional mediawiki_1.27.7-1~deb9u3_all.deb 159a04df8c97437f8d1d2dbc228ca4c9 6928 web optional mediawiki_1.27.7-1~deb9u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEE+h6fmkHn9DUCyl1jUvyOe+23/KIFAl376VsTHGxlZ29rdG1A cmlzZXVwLm5ldAAKCRBS/I577bf8oigqD/9nLUH9VSntTUdP1+sfa8+oFB9X+F5Y REEQXbnCMfJxK+e3LAnMHjjNxPvMNJ67+1bitB/2mHhmZxbbeASCqs+AaFeEB6G7 DQJh9oNKsgWiHvF+HFvAGKxVyYwhgAKzBWLHVKJw0piOSLzgkL6afZkk0DIC2h3D 1VlIoGt8ThdgNiia4WkuppM4uGxZ9OT1E6+k2HWVqNJAB6tJ76YMx5VtAcn8WlU3 xq2Gowa/9UQTwiHk+CSxBkXj98VbZ/DZ/I2yWKo3xDyLv+CNj1bhjtod/0737Jzx kouBBqA9ugx4lvwZctVuQy50+Q42cIDPFkjA7ii1qis1ZRV4Ndy2RT17C74NggRI teLFpVT5hSGRscPyhAcM/5yIZ2t1GuyDq8GK56qPhTeh3ge5dsH3PTK9V0S+i86n Hte01SAbMEAZSYhKNJtqkM1x2KkouKPhX1zs5vuEQ4Bkoe1GETioUHpHKZElbsHA /MK56fxRbvM4x8JX9yx/d9NYDS0eK77E3nXHEs4JZoZqhlCKI4m5vwg6xtfanBPL 3+shqRq10uHeSsPDnw/ld0mBKYk8oY2N8GoY1qZr+f3RFtADlnKgXZrJ6s6Fg6Ze NIz9x+cbZZzwSNwbfx1idQHW3+J0K0J7d6UDehh5y4B6QnndiZnlxz8yCt+NbnAj XIirWw4FiaZLfA== =NYW6 -----END PGP SIGNATURE-----