[Cppcms-users] Release: CppCMS 1.0.3 - security bug fix release
Brought to you by:
artyom-beilis
|
From: Artyom B. <art...@ya...> - 2013-01-04 13:48:56
|
Hello, CppCMS 1.0.3 was released today, it includes security bug fix. This bug allowed CppCMS encoding validation to accept some invalid UTF-8 sequeces which could potentially lead to various security problems like XSS and other. Note for users who used booster::locale::utf::utf_traits or functions booster::locale::conv::utf_to_utf directly rather than using built in CppCMS forms validation/XSS validation, you may need to recompile the application to get the updates The release is avalible on sourceforge and in the official repositories for Ubuntu oneiric, precise and quantal, Debian squeeze, Fedora 16 and 17, Centos 6 and Open Suse 11.4 and 12.1 Regards, Artyom Beilis -------------- CppCMS - C++ Web Framework: http://cppcms.com/ CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/ |