Ubuntu
mediawiki package

mediawiki 1:1.15.0-1.1ubuntu0.2 source package in Ubuntu

Changelog

mediawiki (1:1.15.0-1.1ubuntu0.2) karmic-security; urgency=low

  * SECURITY UPDATE: MediaWiki was found to be vulnerable to login CSRF. An
    attacker who controls a user account on the target wiki can force the
    victim to login as the attacker, via a script on an external website.
    IMPORTANT: Fix includes a breaking change to the API login action. Any
    clients using it will need to be updated. (LP: #557159)
    - debian/patches/CSRF-no-CVE_rev-64680.patch
    - patch from upstream SVN rev. 64680
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-April/000090.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23076
    - CVE-2010-1150
 -- Andreas Wenning <email address hidden>   Wed, 07 Apr 2010 11:52:21 +0200

Upload details

Uploaded by:
Andreas Wenning
Sponsored by:
Marc Deslauriers
Uploaded to:
Karmic
Original maintainer:
MOTU
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mediawiki_1.15.0.orig.tar.gz 10.3 MiB b23a314f4680c8cf6d57225ed3260e0205d64b7f6d3d4db4672c57967bdfe948
mediawiki_1.15.0-1.1ubuntu0.2.diff.gz 32.2 KiB 88e2e5026b0d7eab36bab7acdfbcfdb8359f5e8919a548dd93c27da867e58317
mediawiki_1.15.0-1.1ubuntu0.2.dsc 1.3 KiB a06bea11146b2bee2d90244193b62f0f6131aa7852ebe4eef270d349da7a9250

View changes file

Binary packages built by this source

mediawiki: No summary available for mediawiki in ubuntu karmic.

No description available for mediawiki in ubuntu karmic.

mediawiki-math: No summary available for mediawiki-math in ubuntu karmic.

No description available for mediawiki-math in ubuntu karmic.