[Phpgroupware-developers] Re: phpGroupWare security questions

[Chris Weiss]

the developers list is a better place for this question.

Most of the security bugs in php were also noted on the major security sites.

The versions you question are quite old now and completely
unsupported.  The changes should be documented somewhere in the bug
tracking system either on savannah or sourceforge, but if you're
simply interested in patching I'd instead recommend upgrading to the
latest, currently 0.9.16 and soon to be 0.9.16.001
 


On Fri, 9 Jul 2004 23:02:57 -0400 (EDT), security curmudgeon
<address@hidden> wrote:
> 
> 
> Hello Joseph and Chris:
> 
> I was reading the phpGroupWare changelogs and noticed a few entries
> related to security fixes. I was wondering if you could provide any
> additional details regarding the severity or impact of these.
> 
> 2002-01-02  Scott Moonen  <address@hidden>
>    * Fixed security hole in template system.
> 
> [06022000] - Security fix for login.php3
> 
> [06052000] - Fixed a few possiable security problems with addressbook
> 
> [0.9.14.002]    This is a bug fix release for 0.9.14
>                 - Setup/Config:
>                   + overflow in phpgw_config table fixed
>                   + security hole plugged
> 
> Thanks for any help you can provide,
> 
> Brian
> 
>