Security Warning from Secunia.com

Hi,
unfortunately I found a high critical security warning on secunia.com

http://secunia.com/advisories/22675/

Hope the problem will be solved soon...

creativewebby

Quote from: creativewebby at Nov 07, 2006, 01:36 PM

Hi,
unfortunately I found a high critical security warning on secunia.com

http://secunia.com/advisories/22675/

Hope the problem will be solved soon...

creativewebby

I think you missed some posts. This issue was addressed within hours of discovery. Please see the 0.9.2.2 release announcement yesterday as well as the important security announcement from Friday...

lol the patch was submitted even 3 days before the security warning was posted

Yet, we should add the patch @secunia Sent them the info through their web form

Quote from: davidm at Nov 07, 2006, 01:55 PM

lol the patch was submitted even 3 days before the security warning was posted

Yet, we should add the patch @secunia Sent them the info through their web form

This is the second time I’ve likewise contacted them regarding updating their advisory:

Regarding Secunia Advisory SA22675.

1) The initial patch was applied within hours of our becoming aware of it, on Friday Nov 3. The reporting person did not even contact us prior to publishing the exploit in the 3rd party code we bundle in our solution.

2) A more thorough patch requiring was available the next day, and is available here:
http://modxcms.com/forums/index.php/topic,8726.0.html (which is available both as a patch to 0.9.2.1, and as a fresh installer to 0.9.2.2 with an upgrade for existing 0.9.2.1 installations).

Please address this in your advisory as it seems like we’re ignoring the issue, which we clearly are not!

OK sorry Ryan I just submitted something quite similar without the impatience part (didn’t know they had ignored previous updates...)

The more submissions the merrier as far as I’m concerned.

Still unresolved, I’ve sent them a message. Wonder what the holdup is.