Ubuntu
mediawiki package

mediawiki 1:1.15.0-1.1ubuntu0.3 source package in Ubuntu

Changelog

mediawiki (1:1.15.0-1.1ubuntu0.3) karmic-security; urgency=low

  * SECURITY UPDATE: A CSRF vulnerability was discovered in our login
    interface. Although regular logins are protected as of 1.15.3, it was
    discovered that the account creation and password reset features were not
    protected from CSRF. This could lead to unauthorised access to private
    wikis. (LP: #586773)
    - debian/patches/CSRF-Special-Userlogin-no-CVE_rev-66991.patch
    - patch from upstream SVN rev. 66991
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23371
  * SECURITY UPDATE: Noncompliant CSS parsing behaviour in Internet Explorer
    allows attackers to construct CSS strings which are treated as safe by
    previous versions of MediaWiki, but are decoded to unsafe strings by
    Internet Explorer. (LP: #586773)
    - debian/patches/XSS-IE-no-CVE_rev-66992.patch
    - patch from upstream SVN rev. 66992
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23687
 -- Andreas Wenning <email address hidden>   Mon, 31 May 2010 00:48:35 +0200

Upload details

Uploaded by:
Andreas Wenning
Sponsored by:
Kees Cook
Uploaded to:
Karmic
Original maintainer:
MOTU
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mediawiki_1.15.0.orig.tar.gz 10.3 MiB b23a314f4680c8cf6d57225ed3260e0205d64b7f6d3d4db4672c57967bdfe948
mediawiki_1.15.0-1.1ubuntu0.3.diff.gz 34.7 KiB e2825f8e26d9918dbf3ee7d3ccdc857b994d05891d7c9ca2765a5381b9ecfa94
mediawiki_1.15.0-1.1ubuntu0.3.dsc 1.4 KiB 98e9496baa15a969bbd31345a87cf39c754411a2801aad65c4756cc0ddb9e957

View changes file

Binary packages built by this source

mediawiki: No summary available for mediawiki in ubuntu karmic.

No description available for mediawiki in ubuntu karmic.

mediawiki-math: No summary available for mediawiki-math in ubuntu karmic.

No description available for mediawiki-math in ubuntu karmic.