Comment 12 for bug 537974

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package mediawiki - 1:1.12.0-2ubuntu0.4

---------------
mediawiki (1:1.12.0-2ubuntu0.4) intrepid-security; urgency=low

  * SECURITY UPDATE: CSS validation issue allowing external images to be included
    into wikis where that is disallowed by conf. (LP: #537974)
    - debian/patches/CSS-no-CVE_rev-63429.patch
    - patch based on upstream SVN rev. 63429
    - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html
  * Fix regression in CVE-2009-0737.patch, where the database-specific options
    will not be shown by default when installing mediawiki. (LP: #539697)
 -- Andreas Wenning <email address hidden> Fri, 12 Mar 2010 11:51:32 +0100