[Mahara-contributors] [Bug 557873] [NEW] Configure Site > Site options > Anti-spam needs to show translated strings.

2010-04-07 Thread mitstek
Public bug reported:

Now we can see only English pull-down on "Configure Site > Site options > 
Anti-spam".
So we needs to show translated strings in pull-down by the following 
modification.

Program: lib/antispam.php
Line: 51

[before]
function available_spam_traps() {
$results = array();
$handle = opendir(get_config('docroot') . 'lib/antispam');
while ($file = readdir($handle)) {
preg_match("/(.+)SpamTrap\.php/", $file, $name);
if ($name) {
$results[strtolower($name[1])] = $name[1];
}
}
return $results;
}
[after]
function available_spam_traps() {
$results = array();
$handle = opendir(get_config('docroot') . 'lib/antispam');
while ($file = readdir($handle)) {
preg_match("/(.+)SpamTrap\.php/", $file, $name);
if ($name) {
$results[strtolower($name[1])] = get_string(strtolower($name[1]), 
'admin');
}
}
return $results;
}

** Affects: mahara
 Importance: Undecided
 Status: New

-- 
Configure Site > Site options > Anti-spam needs to show translated strings.
https://bugs.launchpad.net/bugs/557873
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
Now we can see only English pull-down on "Configure Site > Site options > 
Anti-spam".
So we needs to show translated strings in pull-down by the following 
modification.

Program: lib/antispam.php
Line: 51

[before]
function available_spam_traps() {
$results = array();
$handle = opendir(get_config('docroot') . 'lib/antispam');
while ($file = readdir($handle)) {
preg_match("/(.+)SpamTrap\.php/", $file, $name);
if ($name) {
$results[strtolower($name[1])] = $name[1];
}
}
return $results;
}
[after]
function available_spam_traps() {
$results = array();
$handle = opendir(get_config('docroot') . 'lib/antispam');
while ($file = readdir($handle)) {
preg_match("/(.+)SpamTrap\.php/", $file, $name);
if ($name) {
$results[strtolower($name[1])] = get_string(strtolower($name[1]), 
'admin');
}
}
return $results;
}



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547359] Re: List Forum Posts in View

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: Confirmed => Fix Released

-- 
List Forum Posts in View
https://bugs.launchpad.net/bugs/547359
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Released

Bug description:
Would it be possible to add a block to a group view that displays all or the 
last x posts in a group forum?

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3260&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547913] Re: Logout Button

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

-- 
Logout Button
https://bugs.launchpad.net/bugs/547913
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Move the Logout button away from the main navigation.  Most logout buttons are 
in the upper right corner, or side-by-side with the username.

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3354&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547797] Re: Standalone Blogs with RSS

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

-- 
Standalone Blogs with RSS
https://bugs.launchpad.net/bugs/547797
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
It's cool that Blogs can be added to Views, but it seems logical to just have 
stand along blogs as well.  Seems like there should be permissioning/publishing 
for Blogs as a standalone form of content.

In addition, we really need an option to publish RSS feeds.  Obviously, some 
schools might not want their students to publicly blog, but many do.  And what 
good is a public blog without an RSS feed?

Chris : )

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3357&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547613] Re: Homepage View

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

-- 
Homepage View
https://bugs.launchpad.net/bugs/547613
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Once logged-in, we need to have more options for the homepage.  While we can 
create a custom HTML page there, I'd love it to be much more dynamic.  At 
minimum, we should be able to create a Site View and assign that as the 
Homepage, but ideally it would be more like a Facebook or iGoogle interface 
where the user can see status updates on activity or add personalized content.

There are so many great features in Mahara, but they all feel buried many 
levels deep.  We need to bubble more content up to the top.

Chris : )

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3355&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 548245] Re: More display options for the External Feed block

2010-04-07 Thread Evan Goldenberg
Configurable number of items was recently added. Leaving this open,
since there are some other good ideas here.

-- 
More display options for the External Feed block
https://bugs.launchpad.net/bugs/548245
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Currently, the RSS feed block does not allow the user to filter details like 
the title of the feed and the number of items. It would be useful to be able to 
tweak the RSS feed before displaying it by having options that allow you to:

Hide/Show the feed title
Choose the number of items to display
Display/strip HTML
Include/Exclude enclosures

I would suggest you look at feed2js for ideas about the kind of options that 
might be made available to the user:

http://feed2js.org/

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3368&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547981] Re: Show date and time of view submission when showing submitted views

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: Confirmed => Fix Committed

-- 
Show date and time of view submission when showing submitted views
https://bugs.launchpad.net/bugs/547981
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
Per http://mahara.org/interaction/forum/topic.php?id=1115

Where we are showing views that have been submitted for assessment, we should 
make sure we are showing the date/time that they have been submitted, so tutors 
can check that they haven't been submitted after a certain date.

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3402&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547981] Re: Show date and time of view submission when showing submitted views

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

** Changed in: mahara
Milestone: None => 1.3.0

-- 
Show date and time of view submission when showing submitted views
https://bugs.launchpad.net/bugs/547981
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Per http://mahara.org/interaction/forum/topic.php?id=1115

Where we are showing views that have been submitted for assessment, we should 
make sure we are showing the date/time that they have been submitted, so tutors 
can check that they haven't been submitted after a certain date.

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3402&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547643] Re: Gravatar support

2010-04-07 Thread François Marier
** Changed in: mahara
   Status: Fix Released => Fix Committed

** Changed in: mahara
Milestone: None => 1.3.0

** Changed in: mahara
 Assignee: (unassigned) => François Marier (fmarier)

-- 
Gravatar support
https://bugs.launchpad.net/bugs/547643
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
Attached is a patch from Francois to add Gravatar support. Needs review, and 
possibly rebasing against 1.2.

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3408&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547643] Re: Gravatar support

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: Confirmed => Fix Released

-- 
Gravatar support
https://bugs.launchpad.net/bugs/547643
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Released

Bug description:
Attached is a patch from Francois to add Gravatar support. Needs review, and 
possibly rebasing against 1.2.

This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3408&group_id=176&atid=742



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 503254] Re: Qualification type

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Importance: Undecided => Wishlist

-- 
Qualification type
https://bugs.launchpad.net/bugs/503254
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
This is not really a bug, but a feature request (or suggestion) - please see 
this thread for discussion: 
http://mahara.org/interaction/forum/topic.php?id=1380#post6621

Since I am writing an Europass plug-in and there are some questions regarding 
what should be in qualification type, I am proposing the following suggestion:

Can the Qualification type field in Education History be changed to drop-down 
(=select) box with the following options:
- ISCED 0 (Pre-primary education)
- ISCED 1 (Primary education or first stage of basic education)
- ISCED 2 (Lower secondary or second stage of basic education)
- ISCED 3 ((Upper) secondary education)
- ISCED 4 (Post-secondary non-tertiary education)
- ISCED 5 (First stage of tertiary education)
- ISCED 6 (Second stage of tertiary education)

ISCED is a standard, used by European Union, for educational or training 
experience based on a national or international classification. (See: 
http://europass.cedefop.europa.eu/xml/resources/ISCED97.xsd)





___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547407] Re: Two strings need to be translated on 'My Portfolio -> Export' page.

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: Confirmed => Fix Committed

** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

** Changed in: mahara
Milestone: None => 1.3.0

-- 
Two strings need to be translated on 'My Portfolio -> Export' page.
https://bugs.launchpad.net/bugs/547407
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
The following two strings need to be translated on 'My Portfolio -> Export' 
page.

1. Select all
2. Reverse selection

Please see the attached file exporting_myportfolio.jpg for more detail.


This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3445&group_id=176&atid=739



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 530318] Re: Feature request :Online users to only show friends

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: New => Triaged

-- 
Feature request :Online users to only show friends 
https://bugs.launchpad.net/bugs/530318
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Triaged

Bug description:
Currently there is a block on the home page showing the users that have come 
online in the last 10 minutes.

The problems with this.
The list can be quite large and if your mahara site is running several 
institutions then users from other instituions will show as well.
Someone could be logged in for more than 10 minutes and they won't show.

It would be better to only show online users who are connected in some way to 
the user - eg friends or in a group they are a member of.

This is similar in concept to the groups block that shows on the home page 
where only groups that the logged in user is part of are shown.



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547368] Re: lang/en.utf8/help/forms/siteoptions.remoteavatars.html typo

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: Confirmed => Fix Committed

** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

** Changed in: mahara
Milestone: None => 1.3.0

-- 
lang/en.utf8/help/forms/siteoptions.remoteavatars.html typo
https://bugs.launchpad.net/bugs/547368
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
Help file "lang/en.utf8/help/forms/siteoptions.remoteavatars.html" needs to be 
fixed as below (Gravator -> Gravatar).

[before]
Also, for sites delivered over https, enabling Gravator

[after]
Also, for sites delivered over https, enabling Gravatar


This bug was imported from eduforge.org, see:
https://eduforge.org/tracker/index.php?func=detail&aid=3446&group_id=176&atid=739



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 539296] Re: Accessibility: Visual captcha

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Status: In Progress => Fix Committed

-- 
Accessibility: Visual captcha
https://bugs.launchpad.net/bugs/539296
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
 affects mahara

>From Jason White:


There's a visual captcha as part of the registration form. For those of us
who can't see the screen, this precludes access altogether, as no
alternative is offered. My only choice at this point would be to ask
someone else to create an account, whereas someone without accessibility
needs would be able to do so easily and independently.

I am using Firefox 3.5.6, the Orca assistive technology
(http://live.gnome.org/Orca), a refreshable braille display and speech
output.

-- 
/* ---
Penny Leach | http://mjollnir.org | http://she.geek.nz
GPG: 8347 00FC B5BF 6CC0 0FC9 AB90 1875 120A A30E C22B
--- */




___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 547089] Re: Request: Possibility to decide how many news are visible in a newsfeed

2010-04-07 Thread Evan Goldenberg
Added this ability in b543d6b47131b33ade4a49e930a6721b32f4990b on
master.

** Changed in: mahara
   Status: New => Fix Committed

** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

** Changed in: mahara
Milestone: None => 1.3.0

-- 
Request: Possibility to decide how many news are visible in a newsfeed
https://bugs.launchpad.net/bugs/547089
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Committed

Bug description:
In a view we would like to see only 3 news in a newsfeed, so far only 10 are 
possible, no number can be chosen.



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 553291] Re: Search feature for forums

2010-04-07 Thread Evan Goldenberg
** Changed in: mahara
   Importance: Undecided => Wishlist

-- 
Search feature for forums
https://bugs.launchpad.net/bugs/553291
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
There is no feature for searching discussion forums (unless I am not looking 
hard enough).

Users should be able to search discussion forums for keywords or phrases. The 
search would either be selectable to work within a single forum, or across all 
forums in a group.

Even better, being able to search across multiple forums across multiple groups 
would be great. I'm thinking something along the lines of selecting groups of 
discussion forums by tag, for example, and then searching posts by keyword 
within that group.





___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 552939] Re: Ambigious AJAX link text

2010-04-07 Thread Evan Goldenberg
This has been changed in the usability enhancements that will likely be
part of Mahara 1.3.

The profile view is now simply listed among all other views on the "My
Portfolio" page. It cannot be deleted, however, and instead of the "Edit
Access" link that appears for other views, it has the link the toggle
between public and logged in access. The text has been changed for
improved clarity: "Allow public access" and "Allow logged-in users
only". The new context should also aid user's in understanding what the
link does.

** Changed in: mahara
   Status: New => Confirmed

** Changed in: mahara
 Assignee: (unassigned) => Evan Goldenberg (naveg)

** Changed in: mahara
Milestone: None => 1.3.0

-- 
Ambigious AJAX link text
https://bugs.launchpad.net/bugs/552939
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
The "Profile->View profile page" page contains an AJAX link that switches the 
profile visibility between public and logged-in users. There are a number of 
problems with this link.

1. The first problem is that it is ambiguous. The link looks like a title, 
telling the user the current state of the public access to the profile. It is 
not. It is actually a link telling the user what will happen if they click on 
the link. It is not obvious though, without some experimentation. That's the 
most serious of the flaws.

2. Since a profile page is like a default view for a user, this link ought to 
be replaced with a set of view privileges as is available for the non-default 
views. Why should the profile have just public/logged-in access rights, while 
the additional views have a very rich set of privileges that can be applied? It 
should be consistent IMO.

3. Lastly, what is this privilege-changing link doing on the "View profile 
page" page anyway. Should it not be on the page used to *Edit* the profile page?



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 553291] Re: Search feature for forums

2010-04-07 Thread Evan Goldenberg
Taking this a step further, a great thing would be a "global" search
feature in Mahara that searches everything the user has access to, or
all public material if the user is not logged in. Definitely on the
list, but probably a big job.

-- 
Search feature for forums
https://bugs.launchpad.net/bugs/553291
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
There is no feature for searching discussion forums (unless I am not looking 
hard enough).

Users should be able to search discussion forums for keywords or phrases. The 
search would either be selectable to work within a single forum, or across all 
forums in a group.

Even better, being able to search across multiple forums across multiple groups 
would be great. I'm thinking something along the lines of selecting groups of 
discussion forums by tag, for example, and then searching posts by keyword 
within that group.





___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 556369] Re: SQL injection in username field

2010-04-07 Thread Launchpad Bug Tracker
This bug was fixed in the package mahara - 1.0.9-2ubuntu0.6

---
mahara (1.0.9-2ubuntu0.6) jaunty-security; urgency=low

  * SECURITY UPDATE: SQL injection (LP: #556369)
- debian/patches/CVE-2010-0400.dpatch: fix from upstream
- CVE-2010-0400
 -- Francois MarierTue, 06 Apr 2010 22:58:53 +1200

-- 
SQL injection in username field
https://bugs.launchpad.net/bugs/556369
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Released
Status in “mahara” package in Ubuntu: Invalid
Status in “mahara” source package in Lucid: Invalid
Status in “mahara” source package in Jaunty: Fix Released
Status in “mahara” source package in Karmic: Fix Released

Bug description:
Binary package hint: mahara

There is an exploitable SQL injection in the code used to generate new 
usernames.

I will attach here debdiffs for both jaunty and karmic.

For lucid, I will file a separate sync request.

( Also see upstream bug report at https://bugs.launchpad.net/mahara/+bug/534172 
and the upstream security advisory at 
http://mahara.org/interaction/forum/topic.php?id=1713 )



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 556369] Re: SQL injection in username field

2010-04-07 Thread Launchpad Bug Tracker
This bug was fixed in the package mahara - 1.1.5-1ubuntu0.2

---
mahara (1.1.5-1ubuntu0.2) karmic-security; urgency=low

  * SECURITY UPDATE: SQL injection (LP: #556369)
- debian/patches/CVE-2010-0400.dpatch: fix from upstream
- CVE-2010-0400
 -- Francois MarierTue, 06 Apr 2010 22:35:16 +1200

** Changed in: mahara (Ubuntu Karmic)
   Status: Confirmed => Fix Released

** Changed in: mahara (Ubuntu Jaunty)
   Status: Confirmed => Fix Released

-- 
SQL injection in username field
https://bugs.launchpad.net/bugs/556369
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Fix Released
Status in “mahara” package in Ubuntu: Invalid
Status in “mahara” source package in Lucid: Invalid
Status in “mahara” source package in Jaunty: Fix Released
Status in “mahara” source package in Karmic: Fix Released

Bug description:
Binary package hint: mahara

There is an exploitable SQL injection in the code used to generate new 
usernames.

I will attach here debdiffs for both jaunty and karmic.

For lucid, I will file a separate sync request.

( Also see upstream bug report at https://bugs.launchpad.net/mahara/+bug/534172 
and the upstream security advisory at 
http://mahara.org/interaction/forum/topic.php?id=1713 )



___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp