Artur, sorry about that.
The package to sync from sid to natty is mahara 1.2.7-1:
mahara (1.2.7-1) unstable; urgency=high
* New upstream security release:
- CVE-2011-0439 (XSS in select boxes)
- CVE-2011-0440 (CSRF when deleting blogs)
* Add Italian debconf translation (closes: #606378)
* Add Danish debconf translation (closes: #597766)
* Bump debhelper compatibility to 8
** CVE added: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2011-0439
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/676336
Title:
Blogs get deleted without sesskey check
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
