Please sync mahara 1.0.9-2 (universe) from Debian unstable (main).
Bug #325076 reported by
François Marier
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
mahara (Ubuntu) |
Fix Released
|
High
|
Dustin Kirkland |
Bug Description
Please sync mahara 1.0.9-2 (universe) from Debian unstable (main).
Changelog since current jaunty version 1.0.6-1:
mahara (1.0.9-2) unstable; urgency=low
* debian/
* debian/
(for example on Ubuntu)
-- Francois Marier <email address hidden> Mon, 09 Feb 2009 17:55:38 +1300
mahara (1.0.9-1) unstable; urgency=high
* New Upstream Version
- fixes XSS vulnerability in forum posts
* debian/copyright: add the word "copyright" to fix a lintian notice
-- Francois Marier <email address hidden> Tue, 03 Feb 2009 18:26:32 +1300
To post a comment you must log in.
Actually, due to LP#326028, I recommend waiting for 1.0.9-2.
I'll fix the broken path include which makes Mahara completely unusable then the sync can happen and fix all of the security issues as well.