[prev in list] [next in list] [prev in thread] [next in thread] 

List:       listar-dev
Subject:    [Ecartis] Ecartis Security Fix
From:       Rachel Blackman <sparks () noderunner ! net>
Date:       2003-03-03 21:38:22
[Download RAW message or body]

If you run Ecartis and use LSG/2 for the web interface, a bug was
discovered at the end of last week in the logic path which compromised the
security with regards to resetting passwords.  Urgh. :(

A fix was done within a few hours, but somehow with everyone being very
busy, an announcement to ecartis-announce slipped through the cracks.  For
which I am eternally sorry.

ftp://ftp.ecartis.org/pub/ecartis/snapshots/tar/ecartis-1.0.0-snap20030227.
tar.gz

...or for RPM users...

ftp://ftp.ecartis.org/pub/ecartis/snapshots/rpm/ecartis-1.0.0-snap20030227.
i386.rpm
ftp://ftp.ecartis.org/pub/ecartis/snapshots/rpm/ecartis-1.0.0-snap20030227.
src.rpm

If you use LSG/2, this upgrade is STRONGLY suggested.

-- 
Rachel Blackman <sparks@noderunner.net>

[prev in list] [next in list] [prev in thread] [next in thread]