[Silva-general] Silva Security Bulletin: Potential security issue with External Sources

[eric casteleijn]

David Gillies wrote:
> Eric,
> 
> Could you let us know the individual changes made to SilvaDocument.  We have
> a customised version of it so we can't just replace it.  We're on Silva
> 1.5.9.

Luckily, the actual fix is rather small:

https://viewvc.infrae.com/svn/SilvaDocument/branch/SilvaDocument-1.5/Document.py?r1=23285&r2=27402

Just add those 3 lines, and rebuild you catalog, and you're good.

-- 
- eric casteleijn
http://infrae.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.infrae.com/pipermail/silva-general/attachments/20080205/719369cb/attachment.pgp