-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 16 Apr 2010 14:44:09 -0500 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: source all amd64 Version: 1:1.15.3-1 Distribution: unstable Urgency: high Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Romain Beauxis <toots@rastageeks.org> Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Changes: mediawiki (1:1.15.3-1) unstable; urgency=high . * New upstream release. * Fixes security issue: "MediaWiki was found to be vulnerable to login CSRF. An attacker who controls a user account on the target wiki can force the victim to log in as the attacker, via a script on an external website. If the wiki is configured to allow user scripts, say with "$wgAllowUserJs = true" in LocalSettings.php, then the attacker can proceed to mount a phishing-style attack against the victim to obtain their password." Checksums-Sha1: 4e49d0d2696b0fd32600d8a93083a3421cadfa11 1528 mediawiki_1.15.3-1.dsc 891bf5fb7479c88fbb4fd155666eafe510b2f92c 11486661 mediawiki_1.15.3.orig.tar.gz ff9b4c6a60e56a1e7682d6374fc272fd14075f23 30731 mediawiki_1.15.3-1.diff.gz 40f71324a9ffb0d955d69459d60689c775a2fe81 11477112 mediawiki_1.15.3-1_all.deb b213acb8368930a14edddcfac41c90589de4f824 181690 mediawiki-math_1.15.3-1_amd64.deb Checksums-Sha256: 6269d4fb4a57a9fc4208cdd4b408ac316a3e27b332ae7c3d347c41429788a3da 1528 mediawiki_1.15.3-1.dsc 6c8514ba2796d7fa076ad5282d041b7955cb5114349c3455c7f675f04e110136 11486661 mediawiki_1.15.3.orig.tar.gz 6f55a9f48481ee1eea3693f86f6123d429fd1eb1b5aa54c17e54fec7299588a9 30731 mediawiki_1.15.3-1.diff.gz e3fa6ebbd27bb98e60f15371e4c88b9a347e9b93d373a9bac1c64c81ca001756 11477112 mediawiki_1.15.3-1_all.deb 961e7813c95e97c7bf00e371ebde53f8f21b9a2b5a49163ca9efa8b1571d7755 181690 mediawiki-math_1.15.3-1_amd64.deb Files: 78593cfcb913d8265e0ffef5325db9b8 1528 web optional mediawiki_1.15.3-1.dsc 6bf89504a3192d4641de5404d39ac50a 11486661 web optional mediawiki_1.15.3.orig.tar.gz 6b7bfe0b9d72de65908b07132cadc7c8 30731 web optional mediawiki_1.15.3-1.diff.gz 388a23e144776542c81d050642c75f64 11477112 web optional mediawiki_1.15.3-1_all.deb d5ca9f7c5654ee146f0483c8b4849e78 181690 web optional mediawiki-math_1.15.3-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJLyNaiAAoJEAC5aaocqV0Z5vsH/363Up9pN6f//riLcTL8lRDL Eb4XDppGktBjfF7yyfGUDCA54uvEhAVaqpYdDLGNYe6bHutJD+XUg6BQ+KTh9UEW 2p03pWW0PB8k+DUlhnta71b+SpQHiXWYfb0nKoaEqEBDoiwJcTtfXWCM2b/QX95L E2DKlvq9xDjujNC7seAs3x0lCIqYkp0R+fkTUY+W919cDYZ9j6d4osVvfBHJzfp+ HY3STOWbpJpWCaG/AVOqCOG4m460xfGTKrq1o6yeWjPRGgZiiKfPWtfY2m3DtTGC JVoGLJKuH5a16UNT0IUq1QKmVt+N27799YjOYVNdBLzLytdnduTp4Joius5O6RI= =ovx7 -----END PGP SIGNATURE----- Accepted: mediawiki-math_1.15.3-1_amd64.deb to main/m/mediawiki/mediawiki-math_1.15.3-1_amd64.deb mediawiki_1.15.3-1.diff.gz to main/m/mediawiki/mediawiki_1.15.3-1.diff.gz mediawiki_1.15.3-1.dsc to main/m/mediawiki/mediawiki_1.15.3-1.dsc mediawiki_1.15.3-1_all.deb to main/m/mediawiki/mediawiki_1.15.3-1_all.deb mediawiki_1.15.3.orig.tar.gz to main/m/mediawiki/mediawiki_1.15.3.orig.tar.gz