-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Format: 1.8 Date: Tue, 14 Jan 2014 10:51:35 +0100 Source: mediawiki Binary: mediawiki mediawiki-classes Architecture: source all Version: 1:1.19.10+dfsg-1 Distribution: unstable Urgency: high Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Thorsten Glaser <tg@mirbsd.de> Description: mediawiki - website engine for collaborative work mediawiki-classes - website engine for collaborative work - standalone classes Changes: mediawiki (1:1.19.10+dfsg-1) unstable; urgency=high . * New upstream security fix release: - CVE-2013-4568 (bug 58088) Don't normalize U+FF3C to \ in CSS Checks - CVE-2013-6452 (bug 57550) Disallow stylesheets in SVG Uploads - CVE-2013-6453 (bug 58553) Return error on invalid XML for SVG Uploads - CVE-2013-6454 (bug 58472) Disallow -o-link in styles - CVE-2013-6472 (bug 58699) Fix RevDel log entry information leaks Checksums-Sha1: 97bdb45ca134a72b156a836d7694050188d97b01 2195 mediawiki_1.19.10+dfsg-1.dsc 7bf28e3a0ea470d81c24e83babcb33e80280b6f1 12189116 mediawiki_1.19.10+dfsg.orig.tar.xz 6234d552f2d1d504745b881a08d686343e266ca5 54610 mediawiki_1.19.10+dfsg-1.debian.tar.gz 6f5c9355441090c9f0060508c57df6aced4f6024 11872262 mediawiki_1.19.10+dfsg-1_all.deb 83da447095cbaff7dad31a17a8dd6f7bb894f991 237110 mediawiki-classes_1.19.10+dfsg-1_all.deb Checksums-Sha256: 5a0407c7e979f3a5cecd5ca1de1b9d8336c7d955f87bca76a18cb7344d4e42d0 2195 mediawiki_1.19.10+dfsg-1.dsc 4a98a4a5de659d285ebfa1a67d8f2046ec632633ca421d7b949757965cab6e29 12189116 mediawiki_1.19.10+dfsg.orig.tar.xz 29f9fc9d7e26e7fcf3943a8bac361966bb8fd5cebdfe12ace1ad54837e38ed70 54610 mediawiki_1.19.10+dfsg-1.debian.tar.gz c94b32bb2daec83ccf71e1e33dcc38c62997405f6a7d43ee2184d6cad34a4284 11872262 mediawiki_1.19.10+dfsg-1_all.deb 7da4b5fdb8534e6229fce7e08a148ea9e75574d4b928f09d985322a2526faf40 237110 mediawiki-classes_1.19.10+dfsg-1_all.deb Files: de3104a503bc3d68edb1e31c285d4d30 2195 web optional mediawiki_1.19.10+dfsg-1.dsc f260b3b61b9f74aa60251e7e194c3f93 12189116 web optional mediawiki_1.19.10+dfsg.orig.tar.xz 28d403a07bd8591deccc2002c1599ea4 54610 web optional mediawiki_1.19.10+dfsg-1.debian.tar.gz a07c71b6799e87127fefd72cec723147 11872262 web optional mediawiki_1.19.10+dfsg-1_all.deb afb1dcce4cf3ca0fbfd33990f4e0a5a5 237110 web optional mediawiki-classes_1.19.10+dfsg-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (MirBSD) iQIcBAEBCQAGBQJS1QwJAAoJEHa1NLLpkAfgQiUQAIkcp5GarP9Qc/Radaxa3nnp IrqGeCSdso+xsC8lnpZjSNDsu68XJkJYUSM3BQ2/332kwvszOa6D4PqpMc9f3nz2 7V/OXM/YlwuZ1NUGoRTOADOjeV0Z0TG0ykvLdZjzg0lAlXjteS1OvqYTA8AhX6Pz pri7kRW19PXKbr2C5uHf0UUCi3lQIquSdbgBzzuecrO4eh+WbRPeefnip6yXHeYz /dQPoDhmqJafXFRsEr7LTbiL1/BES5WF4ppbLHTIBVjpqxNvfKmzgCQ4ARfAalEi uJ24IiDLi3makWOnCwHWlv4oFeVgoUik6NlzuSU7vioT2fhDLmwUMqAwMtTt3hG0 eQtT6o9s7WbhX7bBO59vTT7K+sI6qIIgbcekR4PU9qCOVwG0lx8pQ0cA6RBZgZ/b DBriC/xGZFUXt6F+EQ9ijXplhVNzrPs57zAVFDB+Y98LVYfCBPdiqNRFtSREufZf 47terLxio3yKG3Ymv1xSU/hVa1QBDiHdvwjN/tVB6F174pXp7JJFWeoxUSG2uHKB JYL2vGa4MPXUiaLiW5vOORNtAJP3+DvYTBwwOwWu30M/MCTb3vn0CyEhxPns0fBd SJYNxY9sowWAkIGYAEy3nxthzXr56EWoMyR5sfDru8ZPez0ypBqsYaLw9EafeMUH 9o0pjbm8mV8M4tO88d63 =qrsy -----END PGP SIGNATURE-----