Thanks for the patches! Sorry for the delay; I am processing these now.
I might mention that in the future to follow
https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Packaging for
versions (eg, maverick should have 1.2.5-2ubuntu0.1) and to reference
the bug number in the changelog (eg LP: #676336). I did both of these
and have uploaded to the security ppa. I will publish once they are done
building.
** Changed in: mahara (Ubuntu Maverick)
Status: Confirmed => Fix Committed
** Changed in: mahara (Ubuntu Lucid)
Status: Confirmed => Fix Committed
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/676336
Title:
Blogs get deleted without sesskey check
Status in Mahara ePortfolio:
Fix Released
Status in Mahara 1.3 series:
Fix Released
Status in “mahara” package in Ubuntu:
Fix Released
Status in “mahara” source package in Lucid:
Fix Committed
Status in “mahara” source package in Maverick:
Fix Committed
Status in “mahara” source package in Natty:
Fix Released
Bug description:
Permissions are checked but the sesskey is neither passed nor checked
e.g. artefact/blog/index.php?delete=123
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
