-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 08 Sep 2013 19:40:24 +0100 Source: mediawiki Binary: mediawiki Architecture: source all Version: 1:1.19.5-1+deb7u1 Distribution: stable-security Urgency: low Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Jonathan Wiltshire <jmw@debian.org> Description: mediawiki - website engine for collaborative work Changes: mediawiki (1:1.19.5-1+deb7u1) stable-security; urgency=low . * CVE-2013-4302: apply patch from upstream to prevent access to anti-CSRF tokens via JSONP Checksums-Sha1: 044a4f16b71070b5e162e0409b48fe15a47da664 2124 mediawiki_1.19.5-1+deb7u1.dsc 722cdce254e735c5d25cd462616282e6cac63bd5 18535374 mediawiki_1.19.5.orig.tar.gz 6399114029d465165b3b7043236664925388ba06 40238 mediawiki_1.19.5-1+deb7u1.debian.tar.gz bf95db273b4e292aec294b1ee9fcf2f32d466c21 17715588 mediawiki_1.19.5-1+deb7u1_all.deb Checksums-Sha256: f83d888a0129b90dd269e166706079b0d8b2e041042261c38b73d3d0b1510876 2124 mediawiki_1.19.5-1+deb7u1.dsc f37788007d77553742b0ceada996cf71b2d4ae7d07b44cdd073f51a9c98cdffb 18535374 mediawiki_1.19.5.orig.tar.gz 19fd9643b0b253ef72b28937b25cc3ee9f899cde39ba3668f0624bfa5927f036 40238 mediawiki_1.19.5-1+deb7u1.debian.tar.gz c701f3232bed7d9dd8c799800ea402fb882427547e8812a502e4656aa3a9d194 17715588 mediawiki_1.19.5-1+deb7u1_all.deb Files: 06e1b58c55543a4002d7d42ffa42995e 2124 web optional mediawiki_1.19.5-1+deb7u1.dsc 24cadaef1c4dd2109718071e63165b8e 18535374 web optional mediawiki_1.19.5.orig.tar.gz 82daa7523e5530f2932c4e9a160193c7 40238 web optional mediawiki_1.19.5-1+deb7u1.debian.tar.gz c18b291115ab27f849aa94ff7687fdb7 17715588 web optional mediawiki_1.19.5-1+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (GNU/Linux) iQIcBAEBAgAGBQJSMFmyAAoJEFC7AtTIpr9h2KAQAJ0PLAFdif8cGkIuNZdzw3wD swfXLczqHa6IFVxCyboI0A/ihga9vjgrgSSBw3lrHq4/x37wSnfQ3p/bCgoztAHz jvL3iaGAG4ItaVQO7V0TX2XFxZ0qlU0p00f28X18KVS5eyNn2L111sNey+23OM7L uOXIo9rYAx40PXvbFrGlkM1QjAZD1/FMWaGz0UuIdNMR1KrBeTGzGVOCvgmzIsnd UDmPLnQKz90RtBdeQMDyfiCz+KS6pHEAGWldscohnYqgJzMrvPIWPeikIwcHkJOy dhvfnznCYdxqjMND7IGnohq7uHTf+sUqWzHG2NHVvUrJk5VT4MjDehf6cS4ozi7B wSxYCLnJnRBgLALZQVoh9wiyQ0+cF0+I78BHj+Ww9mXMU149mnP2rlRm5m2w+hOE XSN112Hmx4S8FH/8Yuo3dCDB1LgTFzMowHQC6Ud6quPHQJMbnD325DxFx0qqOS4S gMC6gqXSgOJnglWUUNQbFWr2FEr0AvC5eZtX/Lzo5efoEcVQwYkXJMIUgxGCxOQl ZiTtA5I4339nqXLTBlmwILIZ76UAcTifdjKffutTo1zRZqVcz81YIY9V4qzxcewV iDHCwtTi0Wa8xYp5ON4qujjZXT3aIvq+iw81D+HvtKE3jDQCvs3FVmwH/Z4bo9It AGbYL0anW3Y6PgKXZMoS =9N1n -----END PGP SIGNATURE-----