sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Re: [SM-Security] [justdave AT bugzilla.org: [BUGZILLA] Security Advisory - SQL injection, information leak]

From: "Sergey A. Lipnevich" <sergey AT optimaltec.com>
To: Seth Alan Woolley <seth AT positivism.org>
Cc: sergey AT sourcemage.org, sm-security AT lists.ibiblio.org
Subject: Re: [SM-Security] [justdave AT bugzilla.org: [BUGZILLA] Security Advisory - SQL injection, information leak]
Date: Mon, 03 Nov 2003 17:33:52 -0500

I will update to 2.17.5. The upgrade step involves running the checksetup script which is too involved to automate. But the code files will be updated. Thanks!

On Mon, 2003-11-03 at 16:51, Seth Alan Woolley wrote:

fixed:
2.16.4 or newer
2.17.5 or newer

We are on 2.17.4, but since this isn't a dangerous vuln, I'll let Sergey
handle this update and integrate it to stable when I see his perforce
updates come across.  I currently don't have an easy way to test if the
update works since I don't have an existing bugzilla install.




-- 

Sergey A. Lipnevich <sergey AT optimaltec.com>

[SM-Security] [justdave AT bugzilla.org: [BUGZILLA] Security Advisory - SQL injection, information leak], Seth Alan Woolley, 11/03/2003
- Re: [SM-Security] [justdave AT bugzilla.org: [BUGZILLA] Security Advisory - SQL injection, information leak], Seth Alan Woolley, 11/03/2003
  - Re: [SM-Security] [justdave AT bugzilla.org: [BUGZILLA] Security Advisory - SQL injection, information leak], Sergey A. Lipnevich, 11/03/2003