mahara 1.0.4-4+lenny11 source package in Debian

Changelog

mahara (1.0.4-4+lenny11) oldstable-security; urgency=high


  * SECURITY UPDATE: fix unsanitised URIs in external feed block (XSS)
    - debian/patches/CVE-2011-2771.dpatch: upstream patch

  * SECURITY UPDATE: fix DoS when large or invalid images are uploaded
    - debian/patches/CVE-2011-2772.dpatch: upstream patch

  * SECURITY UPDATE: fix CSRF when adding a user to an institution
    - debian/patches/CVE-2011-2773.dpatch: upstream patch

  * SECURITY UPDATE: prevent masquerading as another user through MNet
    - debian/patches/mnet_masquerading.dpatch: upstream patch

 -- Francois Marier <email address hidden>  Thu, 03 Nov 2011 16:04:03 +1300

Upload details

Uploaded by:
Mahara Debian Packaging Team
Uploaded to:
Lenny
Original maintainer:
Mahara Debian Packaging Team
Architectures:
all
Section:
web
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Lenny release main web

Builds

Downloads

File Size SHA-256 Checksum
mahara_1.0.4-4+lenny11.dsc 1.9 KiB 82e6c828f92b077e9c5999c687276b4e5334786f62c47e3bc554b346cc65f058
mahara_1.0.4.orig.tar.gz 2.3 MiB e2218bdbc94e628bf6a4e2c5b99481a7afa14346bdce177ea9f377242375d776
mahara_1.0.4-4+lenny11.diff.gz 51.8 KiB b76bfd74381a79773d5558fd8a0f8bb1630ba15330479eff7aade096f42668ef

No changes file available.

Binary packages built by this source