-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 15 Mar 2010 14:29:43 -0500 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: source all amd64 Version: 1:1.12.0-2lenny4 Distribution: stable-security Urgency: high Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Romain Beauxis <toots@rastageeks.org> Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Changes: mediawiki (1:1.12.0-2lenny4) stable-security; urgency=high . * Security upload. Fixes two security issue: "A CSS validation issue was discovered which allows editors to display external images in wiki pages. This is a privacy concern on public wikis, since a malicious user may link to an image on a server they control, which would allow that attacker to gather IP addresses and other information from users of the public wiki. All sites running publicly-editable MediaWiki installations are advised to upgrade. . A data leakage vulnerability was discovered in thumb.php which affects wikis which restrict access to private files using img_auth.php, or some similar scheme. All versions of MediaWiki since 1.5 are affected." * Backported patches from upstream release, via the Ubuntu package. Checksums-Sha1: c62ce90f3a2750b34300bbb8939e94746286e807 1549 mediawiki_1.12.0-2lenny4.dsc 4464320fe98ad0137b3536518c1c8831f8e751a9 61443 mediawiki_1.12.0-2lenny4.diff.gz 5f0078031284dd72904411fd523da5920dac6d42 7231304 mediawiki_1.12.0-2lenny4_all.deb b7bfb344efeaeec0291cd3ac84fd54f44d6ab02a 156990 mediawiki-math_1.12.0-2lenny4_amd64.deb Checksums-Sha256: c08f822f19ba70479c2f80dfc5657470965268ac2e5074e42547615abc9c9982 1549 mediawiki_1.12.0-2lenny4.dsc f206de71b21c5233cd99e52713f15b4ba848b69b856caabc623fa133ec1be25e 61443 mediawiki_1.12.0-2lenny4.diff.gz 84e03f877ac5b4c1961e7b5ed08618a2d1828fe470e4d759eabb655f89105ffd 7231304 mediawiki_1.12.0-2lenny4_all.deb 5e779c52c9bd60ab7f3452e6affe4d7f0bd5915a234f2a713207db915ff178d7 156990 mediawiki-math_1.12.0-2lenny4_amd64.deb Files: cdd8466f627db0d230059bea9dc3bffa 1549 web optional mediawiki_1.12.0-2lenny4.dsc fe024a07a1555b8aa813183b98de41da 61443 web optional mediawiki_1.12.0-2lenny4.diff.gz ec3604e69ac212e506df83c93e8fec14 7231304 web optional mediawiki_1.12.0-2lenny4_all.deb 4a889dd13d45f38b3594a2dd47e9b59e 156990 web optional mediawiki-math_1.12.0-2lenny4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJLpQISAAoJEAC5aaocqV0Z/FAIAKp+0/v6OwZsrGN8wLtVW2Hy znstZhBUGaMvy5wXNz4DsI5Iu4cRG8RWx4rFG1EqhZLQkOnnnFYmupkcLHxnmnA9 jo8lTEKd7vluKHQ5OYqBdwaC5TaVSN0KL/htEtgueB+hFPBBSie7pgkGQmRAikka jGsT261UiQMquFOeA/5Y4AZ7FGoKG4G40gMRd2fVdK2SAm0J8CtvP8HtYEUHwK0J 56LjsggnjTMfSl3veBjiol1YKTfRkgVKt2RX1ntSYWfsOoX5/4A9WitheRkbIa2V EvI/gzUv8eodtMNuJw9H58gGk7qYiwQdKCyfb/NiZQOdgXXGCGe6aJgY3QskBWM= =hskJ -----END PGP SIGNATURE----- Accepted: mediawiki-math_1.12.0-2lenny4_amd64.deb to main/m/mediawiki/mediawiki-math_1.12.0-2lenny4_amd64.deb mediawiki_1.12.0-2lenny4.diff.gz to main/m/mediawiki/mediawiki_1.12.0-2lenny4.diff.gz mediawiki_1.12.0-2lenny4.dsc to main/m/mediawiki/mediawiki_1.12.0-2lenny4.dsc mediawiki_1.12.0-2lenny4_all.deb to main/m/mediawiki/mediawiki_1.12.0-2lenny4_all.deb