10 October 2012, 0:11

Two new high importance security releases of Mahara are now available: 1.4.5 and 1.5.4. Administrators of all Mahara sites are encouraged to upgrade. The four vulnerability disclosures are as follows:

  https://mahara.org/interaction/forum/topic.php?id=4936
  https://mahara.org/interaction/forum/topic.php?id=4937
  https://mahara.org/interaction/forum/topic.php?id=4938
  https://mahara.org/interaction/forum/topic.php?id=4939

Both updates also includes a few important bug fixes. You can find the full list of changes and download links from these pages:

  https://launchpad.net/mahara/+milestone/1.4.5
  https://launchpad.net/mahara/+milestone/1.5.4

We would also like to remind site administrators that Mahara 1.3 is no longer supported and that the Mahara project currently only offers security support for the Mahara 1.4 and 1.5 series.

As usual, if you find any other problems with these releases, please file a bug on our tracker:

  https://bugs.launchpad.net/mahara/+filebug

and use the support forum if you need to ask for help:

  http://mahara.org/interaction/forum/view.php?id=2

-The Mahara 1.4 and 1.5 series release maintainers

ETA: Fixing up intro paragraph.

17 October 2012, 4:03

Hi everyone,

Unfortunately 1.4.5 and 1.5.4 had a bug where MNet was broken. We apologise for this and have just released new versions which fix this bug. Please use the newer versions instead.

Please see the details on this post: https://mahara.org/interaction/forum/topic.php?id=4962

-The Mahara 1.4 and 1.5 series release maintainers