Ubuntu
mediawiki package

mediawiki 1:1.15.1-1ubuntu2.1 source package in Ubuntu

Changelog

mediawiki (1:1.15.1-1ubuntu2.1) lucid-security; urgency=low

  * SECURITY UPDATE: A CSRF vulnerability was discovered in our login
    interface. Although regular logins are protected as of 1.15.3, it was
    discovered that the account creation and password reset features were not
    protected from CSRF. This could lead to unauthorised access to private
    wikis. (LP: #586773)
    - debian/patches/CSRF-Special-Userlogin-no-CVE_rev-66991.patch
    - patch from upstream SVN rev. 66991
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23371
  * SECURITY UPDATE: Noncompliant CSS parsing behaviour in Internet Explorer
    allows attackers to construct CSS strings which are treated as safe by
    previous versions of MediaWiki, but are decoded to unsafe strings by
    Internet Explorer. (LP: #586773)
    - debian/patches/XSS-IE-no-CVE_rev-66992.patch
    - patch from upstream SVN rev. 66992
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23687
 -- Andreas Wenning <email address hidden>   Mon, 31 May 2010 00:49:12 +0200

Upload details

Uploaded by:
Andreas Wenning
Sponsored by:
Kees Cook
Uploaded to:
Lucid
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mediawiki_1.15.1.orig.tar.gz 10.3 MiB 044a221b135673b395ca9b253af6eed7196eb991827c35348a683c4bae59da44
mediawiki_1.15.1-1ubuntu2.1.diff.gz 35.3 KiB 0771f47b1ace72f4408c34d893461ca0bf34129fc500d4aa6ffa11455f19d133
mediawiki_1.15.1-1ubuntu2.1.dsc 1.4 KiB 8629eb89c3caf8adb396e0ebddfe95f49da757e6378c8b12cdb302a3a7589d95

View changes file

Binary packages built by this source

mediawiki: No summary available for mediawiki in ubuntu lucid.

No description available for mediawiki in ubuntu lucid.

mediawiki-math: No summary available for mediawiki-math in ubuntu lucid.

No description available for mediawiki-math in ubuntu lucid.