Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 2 Aug 2010 00:56:24 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: cmsmadesimple < 1.8.1

http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-
mankara/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+cmsmadesimple%2Fblog+%28CMS+Made+Simple%29

 NOTE: This release fixes an important security vulnerability,
we recommend that ALL users upgrade as soon as possible.

The local inclusion vulnerability fixed is old and affects many
previous versions of CMSMS. Therefore it is important for ALL
installations to be upgraded as soon as possible.

This release also fixes all of the issues encountered with the
CMSMS 1.8 release due to the overhaul of the translation function.
Your performance in the admin section should be back to normal
following this upgrade.

Below is a complete list of the remaining issues that have been
addressed in this release, enjoy.

Version 1.8.1 - Mankara


Security:

    Fixed local inclusion security flaw
-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

http://schokokeks.org - professional webhosting

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ