phpGroupWare - News: Security Advisory and new Release

Security Advisory and new Release

Item posted by Dave Hall <skwashd> on Fri 17 Oct 2003 08:16:27 AM UTC.

We have found a couple of undisclosed security holes in phpGroupWare.
These have been patches. The impact of the flaws are minor, but all
users are encourage to upgrade immediately.

All branches are affected and have been patched.

For 0.9.14.0xx (stable) users:
Grab a new version from http://phpgroupware.org/downloads or run a cvs update
New versions will be propagated out to mirrors shortly
NOTE: This release hasn't been tested on php3

0.9.14.5xx (aka 0.9.16RC1 / testing) users:
Run a cvs update (this will include all new fixes including contacts)
Wait for a 0.9.14.508 based patch to be available in the next 24hours (this requires some testing)

HEAD (unstable) users:
A cvs update will be available in the next 24hours

Cheers

Dave Hall(aka skwashd)
on behalf of the phpGroupWare Crew