-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Nov 2017 15:02:45 -0800 Source: mediawiki Binary: mediawiki mediawiki-classes Architecture: source Version: 1:1.27.4-1~deb9u1 Distribution: stretch-security Urgency: high Maintainer: Kunal Mehta <legoktm@member.fsf.org> Changed-By: Kunal Mehta <legoktm@member.fsf.org> Description: mediawiki - website engine for collaborative work mediawiki-classes - website engine for collaborative work - standalone classes Changes: mediawiki (1:1.27.4-1~deb9u1) stretch-security; urgency=high . * Imported Upstream version 1.27.4 (security release), fixing CVE-2017-8809, CVE-2017-8810, CVE-2017-8808, CVE-2017-8811, CVE-2017-8812, CVE-2017-8814, CVE-2017-8815. * Users who used the default configuration should not be affected by CVE-2017-9841, but an extra .htaccess file will restrict web access to the vendor/ directory. Checksums-Sha1: 2b4c38916f977df9a0a435e8012e9e7a721f9806 2220 mediawiki_1.27.4-1~deb9u1.dsc c82d893659ff3c87f2b6bab9450f5fcc47a66cd1 31813391 mediawiki_1.27.4.orig.tar.gz 48fb56a0d9d9713f25f345c173fd5e9b148643bc 72 mediawiki_1.27.4.orig.tar.gz.asc 5d31f325bf79330d8de608355008a7a7635e869c 71020 mediawiki_1.27.4-1~deb9u1.debian.tar.xz bb8d9bac4003c4bd3c351cedd7d79a2a72039aab 6328 mediawiki_1.27.4-1~deb9u1_amd64.buildinfo Checksums-Sha256: fac13c302b1f01988c7c23792091207065fa9420b636a26e79f537dae0c971c9 2220 mediawiki_1.27.4-1~deb9u1.dsc 6ffac6baacf8a0c999e2d15d24631963efc242b4dab2f632d2614c539eea3976 31813391 mediawiki_1.27.4.orig.tar.gz b24c95ae7ad56e2bf4c152f4862affe18254115d82ed5fa5c43eb08bad668b6c 72 mediawiki_1.27.4.orig.tar.gz.asc ffc2401b07e349aa20ac71e3045769da19d6a14265a26d5ff70c4a9d37f137fd 71020 mediawiki_1.27.4-1~deb9u1.debian.tar.xz 0937252ee37c51470cc80e06ec890d2d809f450903304495e652fcd8972b0708 6328 mediawiki_1.27.4-1~deb9u1_amd64.buildinfo Files: 1b1e0f783555410695c3b7d803ddeb0c 2220 web optional mediawiki_1.27.4-1~deb9u1.dsc 06853344115d704e0e7d20836ac8289b 31813391 web optional mediawiki_1.27.4.orig.tar.gz 50c3f7722e70f8dd66c14f33b7b5cefc 72 web optional mediawiki_1.27.4.orig.tar.gz.asc 80fdc71bbbf694df4b8ce12d1dedabff 71020 web optional mediawiki_1.27.4-1~deb9u1.debian.tar.xz e5763fac916c0e7e62d2116cb5207f08 6328 web optional mediawiki_1.27.4-1~deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAloL/RAACgkQEMKTtsN8 TjaInw/8DXfzpTxbpX2Kivaz3iCf7IqctOQO5xkfNm1abbQfQu6Mi78uStOurbLQ DyXqSPjXrq5LHh/mUdBpqvKsXFKXTmnmOTa5PTjE/Wr/B4uTmTii2rEjWafM1TLt wQne5bLVB9iELLN/9DJ4Ty/DqdaQjhPGazqSOw1X7YWIBYxkUAsZc3dvlVX/xno+ tERL6CKPA3WaqnPN7YBMbA0yKytxJqxmoIHTNLCEkFLErun31YQJEQKbBCjY++ii VCBSHKYe8vWOLj3wW/z1Q1VKkChDaPvGGYyem+4cZpeUyYxB+KP7mVma9Plpi5gx l7UerNMPhllX9MHBLWmjJB3toCtAtgeVzurFWHA9WDln2CyLcvrSHTgaUHXDY4zM ez9PbvfVR7yLADJ3S3oeAibAv+umA0idC193fZl1wB+RRcoMceW71kLwrY9MZFQ3 FywfwmMEGbbSA48M1IaJD1TPG8aKkpE7r3DK7ZluBX7BZIItq6ySImjZz6FUSOdU 7tDDcQn5b+4elMeXnQplwoLsho2zwHL90RW/XHiveWqk1yWKq7wyLi56jj0SeRpO Ae/6Jz09WVu4kBz5B5/7Ac+gKoAkfW9eNhAHEgwA2NBDxLw70KhAWiaCvnzyGGuy Chb8jc9yBv8FeLNEN5JS7Dj02kkr44ZpMuhhq9g3Oe2EnDSXS2o= =IZA9 -----END PGP SIGNATURE-----