[Savannah-hackers] Re: Vulnerabilities in Alexandria

[Mathieu Roy]

"Jaime E. Villate" <address@hidden> said:

> On Tue, Mar 25, 2003 at 05:48:11PM +0100, Mathieu Roy wrote:
> > Thomas Kristensen <address@hidden> said:
> > 
> > > We have discovered security issues with Alexandria, we expect to make
> > > the information public soon, but was informed that you might need an
> > > advance notice of this.
> > > 
> > > If you would like more information please write back to me.
> > 
> > 
> > Thanks for your message but how Savannah is related to Alexandria?
> 
> I think Alexandria is another name for the SourceForge code. 

According to http://sourceforge.net/projects/alexandria/ that's right.
I wrongly assumed that the project was related to
http://freshmeat.net/projects/alexandria/ 

> I remember replacing several references to Alexandria by references
> to Savannah, in the administration interface. It seems to me that
> Alexandria is the module that takes care of site administration; we
> do not rely heavily on that, as we have delegated most tasks to cron
> jobs. But we should be aware of any security issues anyway.

Yes.

Thomas, can you gives more details about this issue? We fixed many
issues since we forked but maybe not the one you found.

Regards,


-- 
Mathieu Roy
 
 << Profile  << http://savannah.gnu.org/users/yeupou <<
 >> Homepage >> http://yeupou.coleumes.org           >>
 << GPG Key  << http://stock.coleumes.org/gpg        <<