[Pkg-mediawiki-devel] Bug#625911: PHP syntax - possible exploit vector?

[Karl Schmidt]

Package: mediawiki
Version: 1:1.15.5-2squeeze1
Severity: normal

Started getting this error in the logs :

PHP Warning:  mysql_query() expects parameter 2 to be resource, boolean given in /usr/share/mediawiki/includes/db/Database.php on line 634, referer: http://www.google.com/url?sa=t&source=web&cd=1&sqi=2&ved=0CDQQFjAA&url=http%3A%2F%2Fwiki.xtronics.com%2Findex.php%2FResistor_Codes&rct=j&q=resistor%20codes&ei=Tj7ETcvHFZGisQPs49ikAQ&usg=AFQjCNF5R1tDkb8FHev1GUQk7VAoiUKTHg





-- System Information:
Debian Release: 6.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages mediawiki depends on:
ii  apache2                2.2.16-6+squeeze1 Apache HTTP Server metapackage
ii  apache2-mpm-prefork [h 2.2.16-6+squeeze1 Apache HTTP Server - traditional n
ii  debconf [debconf-2.0]  1.5.36.1          Debian configuration management sy
ii  mime-support           3.48-1            MIME files 'mime.types' & 'mailcap
ii  php5                   5.3.3-7+squeeze1  server-side, HTML-embedded scripti
ii  php5-mysql             5.3.3-7+squeeze1  MySQL module for php5

Versions of packages mediawiki recommends:
ii  mysql-server-5.0 [mysq 5.0.51a-24+lenny5 MySQL database server binaries
ii  php5-cli               5.3.3-7+squeeze1  command-line interpreter for the p

Versions of packages mediawiki suggests:
pn  clamav                <none>             (no description available)
ii  imagemagick           8:6.6.0.4-3        image manipulation programs
ii  mediawiki-math        1:1.15.5-2squeeze1 math rendering plugin for MediaWik
pn  memcached             <none>             (no description available)
ii  php5-gd               5.3.3-7+squeeze1   GD module for php5

-- debconf information:
* mediawiki/webserver: apache2