Ubuntu
mediawiki package

mediawiki 1:1.11.2-2ubuntu0.6 source package in Ubuntu

Changelog

mediawiki (1:1.11.2-2ubuntu0.6) hardy-security; urgency=low

  * SECURITY UPDATE: A CSRF vulnerability was discovered in our login
    interface. Although regular logins are protected as of 1.15.3, it was
    discovered that the account creation and password reset features were not
    protected from CSRF. This could lead to unauthorised access to private
    wikis. (LP: #586773)
    - debian/patches/CSRF-Special-Userlogin-no-CVE_rev-66991.patch
    - patch from upstream SVN rev. 66991
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23371
  * SECURITY UPDATE: Noncompliant CSS parsing behaviour in Internet Explorer
    allows attackers to construct CSS strings which are treated as safe by
    previous versions of MediaWiki, but are decoded to unsafe strings by
    Internet Explorer. (LP: #586773)
    - debian/patches/XSS-IE-no-CVE_rev-66992.patch
    - patch from upstream SVN rev. 66992
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23687
 -- Andreas Wenning <email address hidden>   Mon, 31 May 2010 00:45:24 +0200

Upload details

Uploaded by:
Andreas Wenning
Sponsored by:
Kees Cook
Uploaded to:
Hardy
Original maintainer:
MOTU
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mediawiki_1.11.2.orig.tar.gz 4.7 MiB 3516fd7f0069e30b1ed6b6fea3794047ac08baf3cf71085c6943605efafd806f
mediawiki_1.11.2-2ubuntu0.6.diff.gz 64.6 KiB 404ae2481f567a7bf69282a551717e8322ddeec36474310d0cdf38adc99637a4
mediawiki_1.11.2-2ubuntu0.6.dsc 972 bytes 76a8c51bbf8c8719d492ff07f862c1a549febe00eea9f7c9425e0ab27ee247bd

View changes file

Binary packages built by this source

mediawiki: No summary available for mediawiki in ubuntu hardy.

No description available for mediawiki in ubuntu hardy.

mediawiki-math: No summary available for mediawiki-math in ubuntu hardy.

No description available for mediawiki-math in ubuntu hardy.