Ubuntu
mediawiki package

mediawiki 1:1.13.3-1ubuntu2.3 source package in Ubuntu

Changelog

mediawiki (1:1.13.3-1ubuntu2.3) jaunty-security; urgency=low

  * SECURITY UPDATE: A CSRF vulnerability was discovered in our login
    interface. Although regular logins are protected as of 1.15.3, it was
    discovered that the account creation and password reset features were not
    protected from CSRF. This could lead to unauthorised access to private
    wikis. (LP: #586773)
    - debian/patches/CSRF-Special-Userlogin-no-CVE_rev-66991.patch
    - patch from upstream SVN rev. 66991
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23371
  * SECURITY UPDATE: Noncompliant CSS parsing behaviour in Internet Explorer
    allows attackers to construct CSS strings which are treated as safe by
    previous versions of MediaWiki, but are decoded to unsafe strings by
    Internet Explorer. (LP: #586773)
    - debian/patches/XSS-IE-no-CVE_rev-66992.patch
    - patch from upstream SVN rev. 66992
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-May/000091.html
    - https://bugzilla.wikimedia.org/show_bug.cgi?id=23687
 -- Andreas Wenning <email address hidden>   Mon, 31 May 2010 00:47:42 +0200

Upload details

Uploaded by:
Andreas Wenning
Sponsored by:
Kees Cook
Uploaded to:
Jaunty
Original maintainer:
MOTU
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mediawiki_1.13.3.orig.tar.gz 8.8 MiB da6962de7156def500ff926060d1d3d1db93ab94ee97620ca5ab8e444035a244
mediawiki_1.13.3-1ubuntu2.3.diff.gz 55.6 KiB 130866170893f4ff2a0f63f36e29314a3fdde8c047500cdb554a827f63478c7f
mediawiki_1.13.3-1ubuntu2.3.dsc 1.3 KiB fdb840b6c00be83bfc44607d7ccd718dbf45f718d16ccb18b3b9d3fb285ed431

View changes file

Binary packages built by this source

mediawiki: No summary available for mediawiki in ubuntu jaunty.

No description available for mediawiki in ubuntu jaunty.

mediawiki-math: No summary available for mediawiki-math in ubuntu jaunty.

No description available for mediawiki-math in ubuntu jaunty.