mediawiki 1:1.15.3-1 source package in Debian

Changelog

mediawiki (1:1.15.3-1) unstable; urgency=high


  * New upstream release.
  * Fixes security issue:
  "MediaWiki was found to be vulnerable to login CSRF. An attacker who
   controls a user account on the target wiki can force the victim to log
   in as the attacker, via a script on an external website. If the wiki is
   configured to allow user scripts, say with "$wgAllowUserJs = true" in
   LocalSettings.php, then the attacker can proceed to mount a
  phishing-style attack against the victim to obtain their password."

 -- Romain Beauxis <email address hidden>  Fri, 16 Apr 2010 14:44:09 -0500