Your message dated Mon, 17 Dec 2012 21:47:05 +0000 with message-id <e1tkiwf-0000vu...@franck.debian.org> and subject line Bug#694998: fixed in mediawiki 1:1.15.5-2squeeze5 has caused the Debian Bug report #694998, regarding mediawiki: CVE-2012-5391 CVE-2012-5395 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 694998: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694998 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: mediawiki Severity: grave Tags: security Justification: user security hole Please see http://www.gossamer-threads.com/lists/wiki/mediawiki/316419 Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: mediawiki Source-Version: 1:1.15.5-2squeeze5 We believe that the bug you reported is fixed in the latest version of mediawiki, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 694...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jonathan Wiltshire <j...@debian.org> (supplier of updated mediawiki package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 16 Dec 2012 17:53:38 +0000 Source: mediawiki Binary: mediawiki mediawiki-math Architecture: source all amd64 Version: 1:1.15.5-2squeeze5 Distribution: stable Urgency: low Maintainer: Mediawiki Maintenance Team <pkg-mediawiki-de...@lists.alioth.debian.org> Changed-By: Jonathan Wiltshire <j...@debian.org> Description: mediawiki - website engine for collaborative work mediawiki-math - math rendering plugin for MediaWiki Closes: 694998 Changes: mediawiki (1:1.15.5-2squeeze5) stable; urgency=low . [ Dominik George ] * Security fixes from upstream (Closes: #694998): - CVE-2012-5391 - Prevent session fixation in Special:UserLogin - Prevent linker regex from exceeding backtrack limit Checksums-Sha1: df943f14a0ebbbd2ff9a9d4a53b005b0e1a8421b 2091 mediawiki_1.15.5-2squeeze5.dsc 4b036c81c494109aed45bb8aea5a1a7d3f5dfb57 43846 mediawiki_1.15.5-2squeeze5.debian.tar.gz 734abfe5010c0159258382c02bcea6f2f0adedf1 11723600 mediawiki_1.15.5-2squeeze5_all.deb d9ca8be277f01f3844bba79094af3d49b16593e4 319250 mediawiki-math_1.15.5-2squeeze5_amd64.deb Checksums-Sha256: 43aa00b653c75ea7f29be9c529776b1730faaa23f6133deadb324c644209ff7b 2091 mediawiki_1.15.5-2squeeze5.dsc 8dd8130ace1cbb97f3828ad1a73538725501d725ad683f2dd52d8105733e725c 43846 mediawiki_1.15.5-2squeeze5.debian.tar.gz 2cc3d4db1e4b887788ab02f6412b5246f94ee9179fedb370247e7aee40f438b1 11723600 mediawiki_1.15.5-2squeeze5_all.deb eb5125190a17a59722b4174ec568208d05d1cb8a6181001ccd3d92efd3b1a983 319250 mediawiki-math_1.15.5-2squeeze5_amd64.deb Files: 24e9358eb6a6ad3396105d1139a156b9 2091 web optional mediawiki_1.15.5-2squeeze5.dsc 273685b984dda08ba863daffb3caf10c 43846 web optional mediawiki_1.15.5-2squeeze5.debian.tar.gz ad0f078b6f6acc0f11c8bb0bfb3415e1 11723600 web optional mediawiki_1.15.5-2squeeze5_all.deb 46a528fbf832cae48edd671a4cb0a3bc 319250 web optional mediawiki-math_1.15.5-2squeeze5_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJQz0L9AAoJEFC7AtTIpr9hzhwP/2pVBfyymzCOdU+uXUGXlHEX GluqnpnfURRyNl9pgm+5yL+44ZHB/OVutKzQX4VwJarNAZ4Gzh9IkNJ5EVuiU5ZI OsxL4MByARJ1+LXBB5DsjQzBuhDmkQk1hjNfD/a1VXm7OCdMJ1HsGHOojduheHvJ FdxvBxA7hnW6J2WiZQQZ5ipnELsqdlX21Og/1XCxboGa0oeN/N+97Vn0UCP1EIhj AeTRi8/GZKu+mBCV7x/4XUTBKhBVYC94naQD4jyFqn7jevtUaRebJIux+N0czbRo 7xLEq84XBwFiGwbZTl12+TCBdkY4uTbEDpkB0cj5ZtCPmXFM7v0f7Pcz8yKu028T 25cFDap9tEeMzu8qg0EwgwnDU/AiMY0RTU+k0fqQmazIAx2WkAV0KKwnYynIL9AE tNPQf49FU+NRmHJ1mtU0XW/JuEgon4vsNPGojVJ7hHmRjxyvSk3j2rLkgcFbO9Nw FdBeAAFK05UpJvC6FceFmLN+wJGzFxfITQCTYz+C4wr5/WmAW/HKRwdqwuo6PqKv A4JdwG5LOpeqFLShRLZPFpjzWo0fu3CzM3SvAj2b4q6LWv7G+JqwXOG6/K9woRs7 HkUmrWwoGgc0XwRxsdLn+9FWmoZe35d6cH4zlqrsZfPeNT7lZQBjoiDEsuagOAdP W0I5vqya2+rLkYCLXP0Q =7vtc -----END PGP SIGNATURE-----
--- End Message ---
