[interchange-cvs] interchange - kwalsh modified UPGRADE

[interchange-cvs at icdevgroup.org]

User:      kwalsh
Date:      2008-02-06 22:44:46 GMT
Modified:  .        UPGRADE
Log:
    * Note about the recently-discovered special_pages/missing.html
      security bug.

Revision  Changes    Path
2.24      +10 -0     interchange/UPGRADE


rev 2.24, prev_rev 2.23
Index: UPGRADE
===================================================================
RCS file: /var/cvs/interchange/UPGRADE,v
retrieving revision 2.23
retrieving revision 2.24
diff -u -r2.23 -r2.24
--- UPGRADE	2 Sep 2007 19:21:04 -0000	2.23
+++ UPGRADE	6 Feb 2008 22:44:46 -0000	2.24
@@ -73,6 +73,16 @@
 
 KNOWN ISSUES UPGRADING FROM 5.4.x
 
+Check the "special_pages/missing.html" file, in all of your Interchange-driven
+websites, for a line that looks like the following:
+
+    [if type=explicit compare="q{[subject]} =~ m{^admin/}"]
+
+If found then replace with the following two lines:
+
+    [tmpn missing_subject][subject][/tmpn]
+    [if scratch missing_subject =~ /^admin/]
+
 Perl 5.8.0 or newer is now required. Running with threads is still not
 recommended for production installations, but is allowed under Perl 5.8.5
 or newer.