Debian
mahara package

mahara 1.0.4-4+lenny10 source package in Debian

Changelog

mahara (1.0.4-4+lenny10) oldstable-security; urgency=high


  * SECURITY UPDATE: fixes to session key validation (CSRF)
    - debian/patches/CVE-2011-1403.dpatch: upstream patch

  * SECURITY UPDATE: privilege escalation in admin area
    - debian/patches/CVE-2011-1402.dpatch: upstream patch

  * SECURITY UPDATE: information disclosure in AJAX calls
    - debian/patches/CVE-2011-1404.dpatch: upstream patch

  * SECURITY UPDATE: https to http downgrade
    - debian/patches/CVE-2011-1406.dpatch: upstream patch

 -- Francois Marier <email address hidden>  Mon, 09 May 2011 13:59:32 +1200

Upload details

Uploaded by:
Mahara Debian Packaging Team
Uploaded to:
Lenny
Original maintainer:
Mahara Debian Packaging Team
Architectures:
all
Section:
web
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Downloads

File Size SHA-256 Checksum
mahara_1.0.4-4+lenny10.dsc 1.9 KiB c67e6863dbf3740bba49a88eadc63b92589d535f55969ef5efb1e88920d847f9
mahara_1.0.4.orig.tar.gz 2.3 MiB e2218bdbc94e628bf6a4e2c5b99481a7afa14346bdce177ea9f377242375d776
mahara_1.0.4-4+lenny10.diff.gz 50.1 KiB 6f4ff848c1d82c91a92f4c9fb1b70eb68759980879c09e0dc15d20052d04645a

No changes file available.

Binary packages built by this source