-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 09 May 2011 13:30:06 +1200
Source: mahara
Binary: mahara mahara-apache2 mahara-mediaplayer
Architecture: source all
Version: 1.2.6-2+squeeze2
Distribution: stable-security
Urgency: high
Maintainer: Mahara Packaging Team <mahara-packaging@lists.launchpad.net>
Changed-By: Francois Marier <francois@debian.org>
Description: 
 mahara     - Electronic portfolio, weblog, and resume builder
 mahara-apache2 - Electronic portfolio, weblog, and resume builder - apache2 config
 mahara-mediaplayer - Electronic portfolio, weblog, and resume builder - internal media
Changes: 
 mahara (1.2.6-2+squeeze2) stable-security; urgency=high
 .
   * SECURITY UPDATE: fixes to session key validation (CSRF)
     - debian/patches/CVE-2011-1403.patch: upstream patch
 .
   * SECURITY UPDATE: privilege escalations
     - debian/patches/CVE-2011-1402.patch: upstream patch
 .
   * SECURITY UPDATE: information disclosure in AJAX calls
     - debian/patches/CVE-2011-1404.patch: upstream patch
 .
   * SECURITY UPDATE: https to http downgrade
     - debian/patches/CVE-2011-1406.patch: upstream patch
 .
   * SECURITY UPDATE: sanitisation of HTML emails
     - debian/patches/CVE-2011-1405.patch: upstream patch
Checksums-Sha1: 
 dd44eb1a184930ad5984ece479174d88b5cef11f 1962 mahara_1.2.6-2+squeeze2.dsc
 2809ff23b19a15a34a9a81e5e5006b07ff363c01 25869 mahara_1.2.6-2+squeeze2.debian.tar.gz
 e5ee4cffeb32b7c707804cfe43b62461d7512637 1629640 mahara_1.2.6-2+squeeze2_all.deb
 a8b971530040e6239ef915a3ce1f692568f41346 12496 mahara-apache2_1.2.6-2+squeeze2_all.deb
 85b9fc938b4e23f445da2b86ab7020ab976450fb 451768 mahara-mediaplayer_1.2.6-2+squeeze2_all.deb
Checksums-Sha256: 
 f945a2e1458bc0799ff17e1599d4f75724f27386c95edf77971545cb63945b3a 1962 mahara_1.2.6-2+squeeze2.dsc
 c047252d2b8c73635962ee73935e6a83659bff98bb311e5480e4aecbf8bade02 25869 mahara_1.2.6-2+squeeze2.debian.tar.gz
 c0824079e44b14cd89c1e45e9a8bf4bf2801fa26495f1f793eaafd880b69619e 1629640 mahara_1.2.6-2+squeeze2_all.deb
 e9d861f90d87a45e853a3223dc616a9ee829d498de84abf389ee6705d8609816 12496 mahara-apache2_1.2.6-2+squeeze2_all.deb
 cafc85e13abd028ffc92313308b753aff26e49c5dbf52942ee0d8a950af2b8c1 451768 mahara-mediaplayer_1.2.6-2+squeeze2_all.deb
Files: 
 b665e0036eba5d600d47308573db3528 1962 web optional mahara_1.2.6-2+squeeze2.dsc
 538a0ec83007004fb9bbe2098eb465e1 25869 web optional mahara_1.2.6-2+squeeze2.debian.tar.gz
 da28949614a5f89c6c5c610c8f613c69 1629640 web optional mahara_1.2.6-2+squeeze2_all.deb
 af23f0dc7e5ccbfe54defb47c5a3e8a6 12496 web optional mahara-apache2_1.2.6-2+squeeze2_all.deb
 a8994f1940cc72d0018f0e4cfec9ec92 451768 contrib/web optional mahara-mediaplayer_1.2.6-2+squeeze2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=sw2D
-----END PGP SIGNATURE-----