Ubuntu
mediawiki package

mediawiki 1:1.12.0-2ubuntu0.5 source package in Ubuntu

Changelog

mediawiki (1:1.12.0-2ubuntu0.5) intrepid-security; urgency=low

  * SECURITY UPDATE: MediaWiki was found to be vulnerable to login CSRF. An
    attacker who controls a user account on the target wiki can force the
    victim to login as the attacker, via a script on an external website.
    IMPORTANT: Fix includes a breaking change to the API login action. Any
    clients using it will need to be updated. (LP: #557159)
    - debian/patches/CSRF-no-CVE_rev-64680.patch
    - patch based on upstream SVN rev. 64680
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-April/000090.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23076
    - CVE-2010-1150
 -- Andreas Wenning <email address hidden>   Wed, 07 Apr 2010 11:56:02 +0200

Upload details

Uploaded by:
Andreas Wenning
Sponsored by:
Marc Deslauriers
Uploaded to:
Intrepid
Original maintainer:
MOTU
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mediawiki_1.12.0.orig.tar.gz 6.9 MiB 478b38b29f0f6e661b6c632f39e570d654f83c5069b69de2f187b43c20bc8809
mediawiki_1.12.0-2ubuntu0.5.diff.gz 61.3 KiB 87fdc5a0dfdb2ab446b87d48ee180ff4d3b0a2704e2e947be1a3b346bbf89722
mediawiki_1.12.0-2ubuntu0.5.dsc 1.3 KiB 9b237acedf3998cdd289c3791293d0baa5b22f831b8b956a55da78de3a2edf48

View changes file

Binary packages built by this source

mediawiki: No summary available for mediawiki in ubuntu intrepid.

No description available for mediawiki in ubuntu intrepid.

mediawiki-math: No summary available for mediawiki-math in ubuntu intrepid.

No description available for mediawiki-math in ubuntu intrepid.