Feng Forum

Other Topics => Development => Security => Topic started by: taca on April 02, 2011, 11:07:58 am

Title: SA43912
Post by: taca on April 02, 2011, 11:07:58 am
Hi,

Is there anyone working on SA43912 (http://secunia.com/advisories/43912/)?

Best regards.
Title: Re: SA43912
Post by: mmccarn on April 03, 2011, 10:20:40 am
I have reported this issue in the bug tracker:
http://www.fengoffice.com/web/bugs/view.php?id=2809
Title: Re: SA43912
Post by: franponce87 on April 11, 2011, 03:37:25 pm
Thank you both for your heads up. We have already made some fixes for the future version of Feng Office about this.

Keep up the good work!

Best regards,
Francisco
Title: Re: SA43912
Post by: taca on May 11, 2011, 08:52:17 am
Then when is next release?

Is it possilbe to see the fix at some where, such as cvsweb like interface??
Title: Re: SA43912
Post by: franponce87 on May 23, 2011, 03:03:00 pm
The 1.7.5-rc version we have released last week already has those fixes

Best regards!
Francisco
Title: Re: SA43912
Post by: taca on May 23, 2011, 06:56:07 pm
The 1.7.5-rc version we have released last week already has those fixes
I see.

But what is the exact parts that the problem were existed and fixed?

Not feature release, but currently installed Feng Office should be fixed first.
Is it too difficult to show the corresponding parts with simply accessing source code repository?

Best regards.
Title: Re: SA43912
Post by: franponce87 on May 30, 2011, 11:58:13 am
I was not in charge of fixing that issue, so to be honest I am not 100% sure even though I have some idea..

Anyway, if you would like to compare the new release version with the old one to see the changes in the code, you may just compare them with any tool you prefer (Eclipse for instance, allows you to)

Best regards,
Francisco