Hei Melissa, Ping from Helsinki mini-BSP.
It seems that upstream Git [1] has fixes for these security issues over a month. Debian is in freeze now, please backport those patches soon and try to get them in Wheezy [2] http://release.debian.org/wheezy/freeze_policy.html. If there's no answer to this bug in two weeks, I'll probably request the mahara removal from testing, considering that it has no reverse dependencies. This would be a hard step but we have to release Debian soon. [1] git://gitorious.org/mahara/mahara.git [2] http://release.debian.org/wheezy/freeze_policy.html -- Eugene V. Lyubimkin aka JackYF, JID: jackyf.devel(maildog)gmail.com C++ GNU/Linux userspace developer, Debian Developer -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org