Re: [Phpgroupware-developers] PHPGW - SECURITY WARNING ALL BRANCHES

[Dave Hall]

Sigurd Nes <address@hidden> wrote:

> Dave Hall wrote:
> 
> >Hi all,
> >
> >Please be aware there is minor security advisory for phpgw.  See
> >http://www.security-corporation.co for more
> >info.
> >
> >There is also a vfs security patch also.  This prevents the vfs path
> >being in the document root, which has been exploited in other php 
> based>groupware suites.
> >
> >We have fixed this in cvs for all branches (14, 16preRC and 
> HEAD).  This
> >affects all previous versions of phpgroupare.  We will be releasing
> >packaged releases in about 12hours.
> >
> >  
> >
> Can't see it commited to HEAD :-(
> 

Hmmm ... I thought Ralf said it was committed to HEAD.  Maybe I was
still half asleep when he told me where it had been fixed.

dave.hall.vcf
Description: Card for <dave.hall@mbox.com.au>