mahara (1.2.7-1ubuntu0.1) natty-security; urgency=low
* SECURITY UPDATE: fixes to session key validation (CSRF)
- debian/patches/CVE-2011-1403.patch: upstream patch
* SECURITY UPDATE: privilege escalations
- debian/patches/CVE-2011-1402.patch: upstream patch
* SECURITY UPDATE: information disclosure in AJAX calls
- debian/patches/CVE-2011-1404.patch: upstream patch
* SECURITY UPDATE: https to http downgrade
- debian/patches/CVE-2011-1406.patch: upstream patch
* SECURITY UPDATE: sanitisation of HTML emails
- debian/patches/CVE-2011-1405.patch: upstream patch
Date: Tue, 10 May 2011 16:36:06 +1200
Changed-By: Francois Marier <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/natty/+source/mahara/1.2.7-1ubuntu0.1
Format: 1.8
Date: Tue, 10 May 2011 16:36:06 +1200
Source: mahara
Binary: mahara mahara-apache2 mahara-mediaplayer
Architecture: source
Version: 1.2.7-1ubuntu0.1
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Francois Marier <[email protected]>
Description:
mahara - Electronic portfolio, weblog, and resume builder
mahara-apache2 - Electronic portfolio, weblog, and resume builder - apache2
config
mahara-mediaplayer - Electronic portfolio, weblog, and resume builder -
internal media
Changes:
mahara (1.2.7-1ubuntu0.1) natty-security; urgency=low
.
* SECURITY UPDATE: fixes to session key validation (CSRF)
- debian/patches/CVE-2011-1403.patch: upstream patch
.
* SECURITY UPDATE: privilege escalations
- debian/patches/CVE-2011-1402.patch: upstream patch
.
* SECURITY UPDATE: information disclosure in AJAX calls
- debian/patches/CVE-2011-1404.patch: upstream patch
.
* SECURITY UPDATE: https to http downgrade
- debian/patches/CVE-2011-1406.patch: upstream patch
.
* SECURITY UPDATE: sanitisation of HTML emails
- debian/patches/CVE-2011-1405.patch: upstream patch
Checksums-Sha1:
926d1912a10dd3e4e079ace9a3e6f4e72ee6ff5f 2041 mahara_1.2.7-1ubuntu0.1.dsc
7185888f9694a20645cef9995544df3f0ed40a80 26758
mahara_1.2.7-1ubuntu0.1.debian.tar.gz
Checksums-Sha256:
903ea16c0e7b373774b70a0788bb9e520038967f1c81cb702769da7347f3313b 2041
mahara_1.2.7-1ubuntu0.1.dsc
585e4816961671ef5826ca52f15d00212e74acf0754e5288c18d24e681c0b436 26758
mahara_1.2.7-1ubuntu0.1.debian.tar.gz
Files:
cd10309193ea0c2bd2a57bee0fc891c3 2041 web optional mahara_1.2.7-1ubuntu0.1.dsc
980dd7449bdf078aa1356f120a45bf84 26758 web optional
mahara_1.2.7-1ubuntu0.1.debian.tar.gz
Original-Maintainer: Mahara Packaging Team
<[email protected]>
--
Natty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/natty-changes
