From: glFusion Support <support@gl...> - 2011-01-07 04:05:37
-----BEGIN PGP SIGNED MESSAGE-----
The team at glFusion.org is proud to announce that glFusion v1.2.1 is
now available for download. This release continues our commitment to
providing a secure and robust content management system. glFusion
v1.2.1 includes a few security fixes, several stability updates, and a
full set of German language translations compliments of Andrè...
Security Enhancements - The admin configuration screen did not properly
filter all input variables, this resulted in the potential for a cross
site scripting vulnerability. Although the risk is very low since access
to the administration section of a glFusion site requires admin
authentication, we have fixed the filtering problem and recommend that
all users upgrade as soon as possible.
Stability Enhancements - We have implemented several bug fixes and minor
code changes to improve the overall stability of the system.
There are several other enhancements and improvements with glFusion
v1.2.1. See the Full ChangeLog
(http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew) for all the
details. If you are a Chameleon Theme user, don't forget to update to
the latest Chameleon release as well.
You can download the latest version of glFusion at the glFusion site:
The glFusion Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----