Phorum 3.2.9 Released / More Security
| From: | Brian Moon | Date: | Fri, 24 Nov 2000 19:45:01 +0000 |
| Subject: | Phorum 3.2.9 Released / More Security | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-26997@lists.php.net to get a copy of this message | ||
There was yet another security issue found in 3.2.8. We introduced it in
3.2.7 while closing another hole. 3.2.9 fixes all known file inclusion
security holes. I did a thourough scan of the code for any possible other
areas where user input could be used to expose file contents. All such areas
have been handled.
There are diffs for 3.2.6, 3.2.7 and 3.2.8 availble on the phorum.org front
page.
Brian Moon
Phorum Dev Team