Hello,
CppCMS 1.0.3 was released today, it includes security bug fix.
This bug allowed CppCMS encoding validation to accept some invalid UTF-8 sequeces which
could potentially lead to various security problems like XSS and other.
Note for users who used booster::locale::utf::utf_traits or functions booster::locale::conv::utf_to_utf
directly rather than using built in CppCMS forms validation/XSS validation, you
may need to recompile the application to get the updates
The release is avalible on sourceforge and in the official repositories for
Ubuntu oneiric, precise and quantal, Debian squeeze, Fedora 16 and 17, Centos 6 and Open Suse 11.4 and 12.1
Regards,
Artyom Beilis
--------------
CppCMS - C++ Web Framework: http://cppcms.com/
CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/
|