Package: mediawiki; Maintainer for mediawiki is Kunal Mehta <legoktm@debian.org>; Source for mediawiki is src:mediawiki (PTS, buildd, popcon).
Reported by: Sebastien Delafond <seb@debian.org>
Date: Sun, 21 Dec 2014 15:57:02 UTC
Severity: important
Tags: fixed-upstream, patch, security, upstream
Found in versions mediawiki/1:1.19.20+dfsg-2.1, mediawiki/1:1.19.5-1
Fixed in versions mediawiki/1:1.19.20+dfsg-0+deb7u3, mediawiki/1:1.19.20+dfsg-2.2
Done: thijs@kinkhorst.com (Thijs Kinkhorst)
Bug is archived. No further changes may be made.
View this report as an mbox folder, status mbox, maintainer mbox
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Message #10 received at 773654@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
[mediawiki.debdiff (text/plain, attachment)]
Added tag(s) security.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sun, 21 Dec 2014 21:33:16 GMT) (full text, mbox, link).
Added tag(s) fixed-upstream.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sun, 21 Dec 2014 21:33:20 GMT) (full text, mbox, link).
Marked as fixed in versions mediawiki/1:1.19.20+dfsg-2.2.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Tue, 23 Dec 2014 12:57:05 GMT) (full text, mbox, link).
Marked as found in versions mediawiki/1:1.19.5-1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Tue, 23 Dec 2014 12:57:08 GMT) (full text, mbox, link).
Marked as fixed in versions mediawiki/1:1.19.20+dfsg-0+deb7u3.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Wed, 24 Dec 2014 06:33:04 GMT) (full text, mbox, link).
Changed Bug title to 'mediawiki: CVE-2014-9475: thumb.php outputs wikitext message as raw HTML' from 'mediawiki: Security issue: thumb.php outputs wikitext message as raw HTML'
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sun, 04 Jan 2015 04:51:29 GMT) (full text, mbox, link).
Marked Bug as done
Request was from thijs@kinkhorst.com (Thijs Kinkhorst)
to control@bugs.debian.org.
(Wed, 08 Apr 2015 13:06:22 GMT) (full text, mbox, link).
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Thu, 07 May 2015 07:28:14 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.
Vulmon