Fixed the bug #887548 http://drupal.org/node/887548
See SA-CONTRIB-2010-012 - ODF Import - Access Bypass (possible Cross Site Scripting) for details on this release.
First stable release