Patch for FFCE2.0?

LZZ · Post by **LZZ** » Mon Dec 04, 2006 10:47 pm

Hi,

Will there be any new version or patch release for FFCE 2.0 due to the reverse cross-site request (RCSR) vulnerability? Any estimated timeline? I'm planning for an upgrade of our FFCE version to 2.0, but held back the upgrade due to the disclosure of the vulnerability. Appreciate your advise!

Articles on vulnerability:
http://isc.sans.org/diary.php?storyid=1879
http://www.zdnetasia.com/news/security/ ... -39000005c
http://www.theregister.co.uk/2006/11/23 ... print.html

Post by **DraconPern** » Tue Dec 12, 2006 4:34 am

Yes, there will be a new version. I am also waiting for the patch for it.