Critical Vulnerability: Library DB <= 0.2

Archived from the Library DB Discussion forum.

secpod_research_team — Wed Aug 03, 2011 1:52 am

Hello,

SecPod research team member has found security vulnerability in Library DB.

Presently reported in Bug Tracker (Above given “Bug Tracker” link), bug id is : 786
Please let us know is it a proper place or do I need to submit the details in some other place.

Waiting for the response.

Thank you,
SecPod Research Team

shannah — Wed Aug 03, 2011 1:15 pm

Please either:

  1. Update to Librarian DB 0.3.1 or later

or

  1. Update the dataface directory of your existing install to use Xataface 1.3rc5 or later (or 1.1.6 if you are still on PHP 4).

This will resolve the issue.