phpThumb Vulnerability again on 2.0.5?

I noticed the upgrade from 2.0.4 to 2.0.5 overwrote the changes to php Thumb php.functions.php that were recomended by this fix

I see the notice is still showing in the manager news panel and am confused as to whether the devs feel it is necessary for modx.

Modx is the becoming one of the best CMS systems one can use. Keep up the great work.

Quote from: Glasairmell at Dec 09, 2010, 12:17 AM

I noticed the upgrade from 2.0.4 to 2.0.5 overwrote the changes to php Thumb php.functions.php that were recomended by this fix
I see the notice is still showing in the manager news panel and am confused as to whether the devs feel it is necessary for modx.

Well, considering we don’t have a phpThumb.php, and phpThumb is completely locked down by permissions, so the vuln doesn’t affect the phpThumb in modx.

That said, I’ve added an issue into Redmine for it: http://bugs.modx.com/issues/2969

This is pushed to 2.1.0, as that fix actually causes other issues.