[ubuntu/lucid] mediawiki 1:1.15.1-1ubuntu1 (Accepted)

[Andreas Wenning]

mediawiki (1:1.15.1-1ubuntu1) lucid; urgency=low

  * SECURITY UPDATE: CSS validation issue allowing external images to be included
    into wikis where that is disallowed by conf. (LP: #537974)
    - debian/patches/CSS-no-CVE_rev-63429.patch
    - patch from upstream SVN rev. 63429
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html
  * SECURITY UPDATE: Data leakage vulnerability in thumb.php affecting wikis
    which restrict access to private files using eg. img_auth.php.
    - debian/patches/DataLeakage-no-CVE_rev-63436.patch
    - patch from upstream SVN rev. 63436
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html

Date: Fri, 12 Mar 2010 12:06:25 +0100
Changed-By: Andreas Wenning <awen at awen.dk>
Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel at lists.alioth.debian.org>
https://launchpad.net/ubuntu/lucid/+source/mediawiki/1:1.15.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 12 Mar 2010 12:06:25 +0100
Source: mediawiki
Binary: mediawiki mediawiki-math
Architecture: source
Version: 1:1.15.1-1ubuntu1
Distribution: lucid
Urgency: low
Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-devel at lists.alioth.debian.org>
Changed-By: Andreas Wenning <awen at awen.dk>
Description: 
 mediawiki  - website engine for collaborative work
 mediawiki-math - math rendering plugin for MediaWiki
Changes: 
 mediawiki (1:1.15.1-1ubuntu1) lucid; urgency=low
 .
   * SECURITY UPDATE: CSS validation issue allowing external images to be included
     into wikis where that is disallowed by conf. (LP: #537974)
     - debian/patches/CSS-no-CVE_rev-63429.patch
     - patch from upstream SVN rev. 63429
     - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html
   * SECURITY UPDATE: Data leakage vulnerability in thumb.php affecting wikis
     which restrict access to private files using eg. img_auth.php.
     - debian/patches/DataLeakage-no-CVE_rev-63436.patch
     - patch from upstream SVN rev. 63436
     - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html
Checksums-Sha1: 
 1a1310b200d5e5df249bcd2e172bcd8f2bfe86e0 1263 mediawiki_1.15.1-1ubuntu1.dsc
 03e767ee88c4295fc44e66fbb794260776fc9095 31444 mediawiki_1.15.1-1ubuntu1.diff.gz
Checksums-Sha256: 
 328ca190dac94d34339ce3c7f64a5a421d3e1fb2a2ec4af08b314dbddd47ddef 1263 mediawiki_1.15.1-1ubuntu1.dsc
 b53ee79c9de366fe67e3675ff466aa8b8fc7e993d8b33056df8b4cdf52f55f8b 31444 mediawiki_1.15.1-1ubuntu1.diff.gz
Files: 
 fc86474aecbeb820b02395f8e3c000c9 1263 web optional mediawiki_1.15.1-1ubuntu1.dsc
 2e678c0e699c13a4ac34b9d6f4551fee 31444 web optional mediawiki_1.15.1-1ubuntu1.diff.gz
Launchpad-Bugs-Fixed: 537974

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkuaIPkACgkQrqdIgAQM9uEJ7gCdFGq5QAapsKjcBgTasisJv4tv
0fQAn0mPVDKiZUJn3KtLUx4JtwVE4zdE
=BWXl
-----END PGP SIGNATURE-----