-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 21 Dec 2014 13:11:10 +0100 Source: mediawiki Binary: mediawiki mediawiki-classes Architecture: source all Version: 1:1.19.20+dfsg-2.2 Distribution: unstable Urgency: medium Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel@lists.alioth.debian.org> Changed-By: Sebastien Delafond <seb@debian.org> Description: mediawiki - website engine for collaborative work mediawiki-classes - website engine for collaborative work - standalone classes Changes: mediawiki (1:1.19.20+dfsg-2.2) unstable; urgency=medium . * Non-maintainer upload. * Add patch fixing T76686: thumb.php outputs wikitext message as raw HTML, which could lead to xss. Permission to edit MediaWiki namespace is required to exploit this. Checksums-Sha1: b45c7a9f6ccdf0cef56fb1d5bada3cf4edbb11ea 1786 mediawiki_1.19.20+dfsg-2.2.dsc 3a36c7f75d1e01e2241504da9fba99a8460a104c 63476 mediawiki_1.19.20+dfsg-2.2.debian.tar.xz a236cc9d13f58ea15ed5932281eccefdda0a3c16 11768298 mediawiki_1.19.20+dfsg-2.2_all.deb 0e2d1599ea8776bdc22aa92cec2118e7804190e9 238640 mediawiki-classes_1.19.20+dfsg-2.2_all.deb Checksums-Sha256: 02d4633fbd19fc0d3d87a9f6aac19600a62c2feba4d73b7732c3a376c8de106c 1786 mediawiki_1.19.20+dfsg-2.2.dsc 5aee5c1f8b283e5f55e1d699433e0ac778fc7c15d40b9a1b5a9c760e14f5e0e0 63476 mediawiki_1.19.20+dfsg-2.2.debian.tar.xz 1fba01a047a86baed48679ccfdc33fd867c4b8fe67d0eb8d880b73ce30852c26 11768298 mediawiki_1.19.20+dfsg-2.2_all.deb 14aa50162f82b166588656adea483f8ab9d8585b9479fb0f6fdc7e8123d147f7 238640 mediawiki-classes_1.19.20+dfsg-2.2_all.deb Files: 9530dec9e9a4cac6f015829797a54901 1786 web optional mediawiki_1.19.20+dfsg-2.2.dsc 53e5e484ad1bced1a7685e2a1741ee04 63476 web optional mediawiki_1.19.20+dfsg-2.2.debian.tar.xz 279a342aaa42c12f92e8b3228937d56f 11768298 web optional mediawiki_1.19.20+dfsg-2.2_all.deb 091574a0a1a7b95c1d6c3934ee12a81e 238640 web optional mediawiki-classes_1.19.20+dfsg-2.2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJUlrljAAoJEBC+iYPz1Z1kFYIH/20fKzqSwT8IH/2KWh2jNk76 aB1CeopjUSBj6Z5qWFMTT5vicp4KA/OPAzPMfFFY95brXELYzdnDeP4DJazJ9EhO 1wtKNQMlJ8XylqV5ar3ps+DEGMYEqzJfa1AV9NrGeH1ZKXuDdgS7ihMPq0YjpJJj ZJlZvcMDZNcYwOfk0IULKLSvBZu14MyNiWexpu0uMm6OS8LJ3k3cfiNk/QOo/rj4 Lms+GBmPOGMnG/+hgK1P8zPTsg1tTEtL+FvXtsXJkTH/540zdFWERZgsgj52BgaQ 9ItT2kDjWxXe+rUDiVWZY3Kb6G8Sltx4ANyRDjVOeeV2x9BcFuzoI/E6Ha1iZAM= =jWPk -----END PGP SIGNATURE-----