DSA-2591-1 mahara -- several vulnerabilities

Debian Security Advisory

DSA-2591-1 mahara -- several vulnerabilities

Date Reported:

27 Dec 2012

Affected Packages:

mahara

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2012-2239, CVE-2012-2243, CVE-2012-2244, CVE-2012-2246, CVE-2012-2247, CVE-2012-2253, CVE-2012-6037.

More information:

Multiple security issues have been found in Mahara, an electronic portfolio, weblog, and resume builder, which can result in cross-site scripting, clickjacking or arbitrary file execution.

For the stable distribution (squeeze), these problems have been fixed in version 1.2.6-2+squeeze6.

For the unstable distribution (sid), these problems have been fixed in version 1.5.1-3.1.

We recommend that you upgrade your mahara packages.