[ubuntu/hardy-security] mediawiki_1.11.2-2ubuntu0.7_hppa_translations.tar.gz, mediawiki_1.11.2-2ubuntu0.7_lpia_translations.tar.gz, mediawiki_1.11.2-2ubuntu0.7_sparc_translations.tar.gz (delayed), mediawiki_1.11.2-2ubuntu0.7_i386_translations.tar.gz, mediawiki, mediawiki_1.11.2-2ubuntu0.7_powerpc_translations.tar.gz, mediawiki_1.11.2-2ubuntu0.7_ia64_translations.tar.gz, mediawiki_1.11.2-2ubuntu0.7_amd64_translations.tar.gz 1:1.11.2-2ubuntu0.7 (Accepted)

Ubuntu Installer archive at ubuntu.com
Tue Jul 13 14:04:00 BST 2010


mediawiki (1:1.11.2-2ubuntu0.7) hardy-security; urgency=low

  * SECURITY UPDATE: Data leakage vulnerability in thumb.php affecting wikis
    which restrict access to private files using eg. img_auth.php.
    - CVE-2010-1190
    - debian/patches/DataLeakage-CVE-2010-1190.patch
    - patch based on upstream SVN rev. 63436
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html
    - LP: #603740

Date: Fri, 09 Jul 2010 22:38:34 +0200
Changed-By: Andreas Wenning <awen at awen.dk>
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/mediawiki/1:1.11.2-2ubuntu0.7
-------------- next part --------------
Format: 1.7
Date: Fri, 09 Jul 2010 22:38:34 +0200
Source: mediawiki
Binary: mediawiki mediawiki-math
Architecture: source
Version: 1:1.11.2-2ubuntu0.7
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
Changed-By: Andreas Wenning <awen at awen.dk>
Description: 
 mediawiki  - website engine for collaborative work
 mediawiki-math - math rendering plugin for MediaWiki
Launchpad-Bugs-Fixed: 603740
Changes: 
 mediawiki (1:1.11.2-2ubuntu0.7) hardy-security; urgency=low
 .
   * SECURITY UPDATE: Data leakage vulnerability in thumb.php affecting wikis
     which restrict access to private files using eg. img_auth.php.
     - CVE-2010-1190
     - debian/patches/DataLeakage-CVE-2010-1190.patch
     - patch based on upstream SVN rev. 63436
     - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html
     - LP: #603740
Files: 
 daf36bb3508b570a18ca4f27c66ce5ff 934 web optional mediawiki_1.11.2-2ubuntu0.7.dsc
 14bf1691809313b2de7ec60aeb95fbf0 65942 web optional mediawiki_1.11.2-2ubuntu0.7.diff.gz
Original-Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel at lists.alioth.debian.org>


More information about the Hardy-changes mailing list