Re: [Phpgroupware-developers] PHPGW - SECURITY WARNING ALL BRANCHES

[Sigurd Nes]

Dave Hall wrote:

> Hi all,
>
> Please be aware there is minor security advisory for phpgw.  See
> http://www.security-corporation.com/articles-20030702-005.html for more
> info.
>
> There is also a vfs security patch also.  This prevents the vfs path
> being in the document root, which has been exploited in other php based
> groupware suites.
>
> We have fixed this in cvs for all branches (14, 16preRC and HEAD).  This
> affects all previous versions of phpgroupare.  We will be releasing
> packaged releases in about 12hours.
>
>  
Can't see it commited to HEAD :-(

Sigurd