[Pkg-mediawiki-devel] Bug#762754: mediawiki: Enhance CSS filtering in SVG files

[Henri Salo]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: mediawiki
Version: 1:1.19.18+dfsg-0.1
Severity: normal
Tags: security, fixed-upstream

Hi,

Following security issue was fixed in upstream:

https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-September/000161.html

* (bug 69008) SECURITY: Enhance CSS filtering in SVG files. Filter <style>
* elements; normalize style elements and attributes before filtering; add checks
* for attributes that contain css; add unit tests for html5sec and reported
* bugs.

- ---
Henri Salo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlQjSxcACgkQXf6hBi6kbk/isACfW0KHQbAFp9ZE7dAhym2xq0va
X6kAnjqLq9G70DdWKpQHnXXij4bivO6+
=q/eF
-----END PGP SIGNATURE-----