Fork me on GitHub

Thursday, September 25, 2008

XSS vulnerability in 0.804

Today Fabian Fingerle kindly contacted me to tell me about two nasty XSS bugs that slipped in FP0.804 (stable)

724682692_c99b632f15_m.jpg

The fix were trivial, and if you don’t want to download a whole new package, just overwrite

with those linked.

I’ll take this occasion to release a bugfix package, with the fixes you can find on the SVN stable branch (like feed validation and such).

You can get it from SourceForge.net as usual.

The new version is 0.804.1, svn rev.189

Thank you, Fabian

(img: bomb_icon by ten safe frogs)