Comment 0 for bug 556369

Revision history for this message
François Marier (fmarier) wrote :

Binary package hint: mahara

There is an exploitable SQL injection in the code used to generate new usernames.

I will attach here debdiffs for both jaunty and karmic.

For lucid, I will file a separate sync request.