-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Format: 1.8 Date: Wed, 12 Dec 2012 09:44:08 +0100 Source: mediawiki Binary: mediawiki Architecture: source all Version: 1:1.19.3-1 Distribution: unstable Urgency: high Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Thorsten Glaser <tg@mirbsd.de> Description: mediawiki - website engine for collaborative work Closes: 694998 Changes: mediawiki (1:1.19.3-1) unstable; urgency=high . [ Dominik George ] * Team upload * New upstream version fixes security issues (Closes: #694998) + Prevent session fixation in Special:UserLogin (CVE-2012-5391) https://bugzilla.wikimedia.org/show_bug.cgi?id=40995 + Prevent linker regex from exceeding PCRE backtrack limit https://bugzilla.wikimedia.org/show_bug.cgi?id=41400 . [ Thorsten Glaser ] * Fix spelling error in README.Debian (thanks lintian!) Checksums-Sha1: 0b7c0d9c7925abc1f81aa032e9ef313796d08862 2094 mediawiki_1.19.3-1.dsc 9c0bff33446b100e1ae6c4883e7c5bc8273aa9a9 18447791 mediawiki_1.19.3.orig.tar.gz 56eb20c4c59861c02cabe02d2eab6ccd041fb004 36871 mediawiki_1.19.3-1.debian.tar.gz 117dde12956b1ceb288cb8aa203cdece690932ea 17648746 mediawiki_1.19.3-1_all.deb Checksums-Sha256: c9f88d20b9743c552d31acec7fbd2b345521cd6de2e0a78d904ccd5a173dfd93 2094 mediawiki_1.19.3-1.dsc d7049f230efd12789017867c65abdf1470567a81b5f9a5bccdfe9532f67ad63d 18447791 mediawiki_1.19.3.orig.tar.gz 7d75501973180519d618fa529173816e65cb4be6656b2d3b902b528b5f35f15e 36871 mediawiki_1.19.3-1.debian.tar.gz 6c321f4721f0f955623aef08a895aca745f787f7ee75a597ece002da949c199f 17648746 mediawiki_1.19.3-1_all.deb Files: 5bdd7cdcca92445639d4bbedfe0eb039 2094 web optional mediawiki_1.19.3-1.dsc 6333c9fda65cec9f0570f6bae03cf8d3 18447791 web optional mediawiki_1.19.3.orig.tar.gz a329874b37d5fb8277c9c4ba3d0fc79e 36871 web optional mediawiki_1.19.3-1.debian.tar.gz 908b52f65b131cbdbd14999482cbff28 17648746 web optional mediawiki_1.19.3-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MirBSD) iQIcBAEBCQAGBQJQyavAAAoJEHa1NLLpkAfgx4AQAIRvYusyGstTQrrWeZkaRG1O UhKEvHxHBWUKwrVyu7DFPmSw45fSstq1Ed8yBn+jTdb++qiPQJzrprCuciiCQMIZ 5QeuwGvOgxI4RHlAEwv6oUByPn53zuRnepY0PB0OPdZ/Hhn0VmAOlAXR+9FfpHiZ G0sB72WZyXmtMn9WgFVJdeWmIyRCWT3g2mMYHsUaLylwVN6JoPyIaVmMhb2KsvWB em9KGVQ7GjEZRb+mDhffeT/iTMNnOiYrUbVShEAswSekSmVJVEWoNU2go86Fbf1v O1aOsH57z269NBHr52xcK/Q8twkx4DFNri6lkkBddWQgZ8q97aAzMQnbhplSLn7s jC07P2wPA+cgVZu9sSsoseHePQCjdIV0t2N/J7W17m5tbnzpMFukZmq9zhY3gY6r HYECjNSthMAIdLtGomadITWg3LjMxs4vIXKI9ougYR1rRZUqizueFEvx40ZW3S78 jC9Jy1YmEHj9Ql0QynqVLWXIlak454/hZuqZCT2uIP4dh6pe/h1d0jhWW3ICrRfP RQzgByEz/UyeBLfqLsZj8Ky3o545jTq/TvpoydVAU/6miy/8cH7DltMWcwrbbfG8 alBzu2k7eRRwFUim57QEmLpEjtgRsSewKqN/Dj1wyypKsbffJtPoZljX3GUI+BOG 4wBIS5CtTJdZaUMDuzwd =5aaZ -----END PGP SIGNATURE-----