Today we are pleased to release Habari 0.6.2, the latest update to our 0.6 release. This is a modest update which fixes two potential security vulnerabilities. All users are encouraged to update.
Special thanks go to Sebastian Bergmann for identifying the vulnerability with the installation process, and our own Geoffrey Snedders for identifying and fixing a cross site forgery request! See the 0.6.2 release notes for full details of the fixes.
The Habari Community is dedicated to making Habari as safe and as secure as possible. If you believe you've identified a security vulnerability, please contact security@habariproject.org.
UPDATE: A small typo slipped past our review process, such that the password reset link reads "Forgot Your Passwor". Note the missing "d". Ticket 970 has been opened, and will be resolved in the next release of Habari. Since the typo is not a security or data loss issue, it does not meet our criteria for a new release; and we felt that sneaking the fix into the 0.6.2 release after it had been prepared was a bad precedent to set.
...ed for more bug fixes was seen, and version 0.6.1 was released on May 11, 2009.Today, May 22, 2009, version 0.6.2 has seen the of day. It seems that Habari got to be part of a session presented by Sebastian Bergma...
...g.it/habari-0-6-2-security-fix" title="Habari 0.6.2 (security fix)">Habari 0.6.2 (security fix) È stata rilasciata la versione 0.6.2 di Habari: l'aggiornamento è fortemente consigliato.Security fixHabari 0.6.2 corregge ...