Mind...

Aller au contenu | Aller au menu | Aller à la recherche

juillet 2007

samedi 28 juillet 2007

BlueScreen

Your local checkout of plat/al has been disabled for security reasons. It appears that several critical flaws known in the plat/al codebase have not been patched in your working copy. These flaws are listed below:
  • 2009-10-19 e10bc2ef Prevents auth-groupex from leaking data to third-party attackers.
  • 2008-12-21 a25cdc91 Fixes a SQL injection in geoloc.inc.php.
Please have a look at the SECURITY and core/SECURITY files in any recent plat/al checkout to get more details on which commits did fix those flaws.

Note: you can re-enable your working copy by typing make in the root directory of your checkout (usually in ~/dev/platal).