SQL injection in username field

[François Marier]

Binary package hint: mahara

There is an exploitable SQL injection in the code used to generate new usernames.

I will attach here debdiffs for both jaunty and karmic.

For lucid, I will file a separate sync request.

( Also see upstream bug report at https://bugs.launchpad.net/mahara/+bug/534172 and the upstream security advisory at http://mahara.org/interaction/forum/topic.php?id=1713 )

[Jamie Strandboge (jdstrand)]

Marking Invalid for Lucid. See bug #556407 instead (sync request).

[Jamie Strandboge (jdstrand)]

Subscribing ubuntu-security-sponsors per https://wiki.ubuntu.com/SecurityTeam/SponsorsQueue.

[Marc Deslauriers (mdeslaur)]

ACK to the jaunty and karmic debdiffs.

Updated packages will be published today.

[Launchpad Janitor (janitor)]

This bug was fixed in the package mahara - 1.1.5-1ubuntu0.2

---------------
mahara (1.1.5-1ubuntu0.2) karmic-security; urgency=low

  * SECURITY UPDATE: SQL injection (LP: #556369)
    - debian/patches/CVE-2010-0400.dpatch: fix from upstream
    - CVE-2010-0400
 -- Francois Marier <email address hidden> Tue, 06 Apr 2010 22:35:16 +1200

[Launchpad Janitor (janitor)]

This bug was fixed in the package mahara - 1.0.9-2ubuntu0.6

---------------
mahara (1.0.9-2ubuntu0.6) jaunty-security; urgency=low

  * SECURITY UPDATE: SQL injection (LP: #556369)
    - debian/patches/CVE-2010-0400.dpatch: fix from upstream
    - CVE-2010-0400
 -- Francois Marier <email address hidden> Tue, 06 Apr 2010 22:58:53 +1200