November 2008
2 posts
Agavi 1.0.0 beta 6 finally available!
Agavi 1.0.0 beta 6 is now officially available. It was actually released on November 12, but only the SVN tag and a PEAR package were available so far as we’ve had some problems with Ohloh’s download service that took quite a bit of time to resolve.
This release consists mainly of bugfixes, most of them in the new XML configuration sub-system. More config handlers have been ported to...
False Agavi Vulnerability Reports
There are false reports circulating on MITRE CVE and other security sites about a vulnerability in Agavi that leads to an exploit allowing remote attackers to read arbitrary files on the server’s filesystem.
This vulnerability found by the reporters does, of course, not exist in Agavi itself, but is a problem in the application code (and has been validated as such) of the website where the...