Oops, I forgot to give attribution to bugs in changelog and
announcement. I hate that.
David MENTRE <[EMAIL PROTECTED]> writes:
> - (bug) it was impossible to create an empty base with root account
>without activating autotest mode;
Bug found by Thomas PETAZZONI.
> - (security issue) anyb
Hello,
Thomas Petazzoni <[EMAIL PROTECTED]> writes:
> Anyway, I think that a proper fix would involve
> throwing an exception in io.ml when the bases cannot be loaded, and in
> demexp-server.ml, when this exception is catched, initialize a default
> participant base.
This bug is now fixed. I hav
Frederic Lehobey <[EMAIL PROTECTED]> writes:
> 1/ Anybody (even anonymous) can change public / private status of the
> question (this huge hole is understood and practically solved). :)
This security issue is now fixed is latest stable release.
Yours,
d.
--
pub 1024D/A3AD7A2A 2004-10-03 David
Hello/Bonjour,
[ Français en dessous ]
A new version of demexp is out, it fixes one bug and one security issue:
- (bug) it was impossible to create an empty base with root account
without activating autotest mode;
- (security issue) anybody could change the public/private status of a
que
