-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 10 Dec 2014 23:26:48 +0100 Source: mediawiki Binary: mediawiki Architecture: source all Version: 1:1.19.20+dfsg-0+deb7u2 Distribution: wheezy-security Urgency: medium Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Sebastien Delafond <seb@debian.org> Description: mediawiki - website engine for collaborative work Changes: mediawiki (1:1.19.20+dfsg-0+deb7u2) wheezy-security; urgency=medium . * Non-maintainer upload by the Security Team. * CVE-2014-9277: The <cross-domain-policy> mangling in OutputHandler.php poses a potentially severe security problem for API clients written in PHP, in that format=php is affected. Checksums-Sha1: 1025444332714ba9231bdf73bbb8f96136adc411 1789 mediawiki_1.19.20+dfsg-0+deb7u2.dsc 5591bec737c71a0e5aa1862d4f0415658700e06d 67412 mediawiki_1.19.20+dfsg-0+deb7u2.debian.tar.gz 318a15f24f3c58aad5cca421b3aa56078e689aa2 17864724 mediawiki_1.19.20+dfsg-0+deb7u2_all.deb Checksums-Sha256: 510ec65ca1687a629fd67c88a131760948944068ad8e936a5ff54e8ba7e7064d 1789 mediawiki_1.19.20+dfsg-0+deb7u2.dsc 5d9bd2a280600e065ed0fd1a32891057f4bb8be06e6cf25ff76b890bbe4ba14e 67412 mediawiki_1.19.20+dfsg-0+deb7u2.debian.tar.gz 55cd8aa964eb0b937f3b21b5382ff5f47222e8f305131be9755163d81caf9a0d 17864724 mediawiki_1.19.20+dfsg-0+deb7u2_all.deb Files: 88975aecb78c3d75419308e33ad961ce 1789 web optional mediawiki_1.19.20+dfsg-0+deb7u2.dsc 1da0cef9bd0c4a3f1c249986ddeb9cfc 67412 web optional mediawiki_1.19.20+dfsg-0+deb7u2.debian.tar.gz ee1b8e3f8dfa33ede1891507b5606a48 17864724 web optional mediawiki_1.19.20+dfsg-0+deb7u2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJUiMr7AAoJEBC+iYPz1Z1kEPsH/iXWEUBpihZjsQZHN8y3IU/N CNpl1TuFSWIqt0b7rQh3wDO14xjZrheZBOHQdECxLaFIij/e3YvGmpyWgUbmVYkQ ISZj1O+VSPCFzgPCo1FHo4VIBMvRvNa4tiOO8URkhFwRWl1xaXjMPLVGkpXVdDJT qH93RLnDIYyPZHMMMSu5s+ckQgVzHZ+MwOYQ2X7sCBv8082xRdtO2eSabLroz9z2 TCtpvFrEHdihxxkvxNtAsUvFZgdGMzheusTniTHeJuVbjT2XI0+18tHFYKMT09jE LLVeDjTXaUOpDFqeVxWJPhuV7iDtLuKEPSIdcV4ZEPtTWkC3oIuKlL8vj/2YEO8= =ajAA -----END PGP SIGNATURE-----
