Closed (fixed)
Project:
getID3()
Version:
6.x-1.1
Component:
Code
Priority:
Minor
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
15 Dec 2008 at 05:07 UTC
Updated:
10 Dec 2009 at 01:30 UTC
Jump to comment: Most recent file
Just wanted to advise of this
Your getID3 library is insecure! The demos distributed with getID3 contains code which creates a huge security hole. Remove the demos directory (...sites/all/modules/getid3/getid3/demos) from beneth Drupal's directory.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | getid3_347098.patch | 3.55 KB | drewish |
| #1 | getid3_347098.D5.patch | 1.99 KB | drewish |
Comments
Comment #1
drewish commentedThanks, committed to HEAD, DRUPAL-6--1, and DRUPAL-5.
Comment #2
drewish commentedwhoops the version that went into HEAD and 6.x had some other unrelated fixes in it. oh well.