Secure testing team - Dec 2008 - Bug#508860: mediawiki: several security issues, help wanted !

Package: mediawiki
Severity: grave
Tags: security
Justification: user security hole


	Hi all !

Several security issues have unfortunately been noticed [1] in mediawiki 
that may affect for some any version of the software.

Unfortunately too, I will most likely be overhelmed during the next few months.
As a consequence, any help is much desired on this issue. That package is SVN
maintained
so it shouldn''t be difficult for any interested contributor.

Romain

[1]:
http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, ''unstable''), (1,
''experimental'')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF8, LC_CTYPE=fr_FR.UTF8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

close 508860
thanks

Hi Romain et al,

On Monday 15 December 2008, Romain Beauxis wrote:
> Package: mediawiki
> Severity: grave
> Tags: security
> Justification: user security hole
>
>
> 	Hi all !
>
> Several security issues have unfortunately been noticed [1] in mediawiki
> that may affect for some any version of the software.
Sorry for filing the extra bugs, I clicked the send email button way too fast.
I am closing this one so that we can track the issues in individual bug 
reports.
>
> Unfortunately too, I will most likely be overhelmed during the next few
> months. As a consequence, any help is much desired on this issue. That
> package is SVN maintained so it shouldn''t be difficult for any
interested
> contributor.
>
> Romain
>
> [1]:
> http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/00008
>0.html
Cheers,
-- 
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url :
http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20081215/fd0a8f2f/attachment.pgp