[pLog-svn] Lifetype 1.2.8 ...

[Jon Daley]

 	I think we need to release 1.2.8, at least right when we release 
2.0, because of the wizard fix, so any future upgrades from 1.1 (or 0.3 - 
someone posted to the forums the other day wanting to upgrade from 
0.3.1...) will not have issues.
 	I did wake up this morning wondering if our version compare tool 
works if we hit two digits in the minor version section (ie. 1.2.10 is 
earlier or later than 1.2.9?).

 	Mark, can you explain the issues with the two fixes that you fixed 
recently -- I am not clear as to what they were, and how serious they are. 
Also, is there a way for our testing system to catch these sorts of bugs? 
It would be great if there were tests that then we could run on other bits 
of code too.

On Sun, 4 May 2008, Mark Wu wrote:

> Although we already have conclutsion that we won't release new version of
> 1.2.x ...
>
> But, I think we should release 1.2.8 due to some secutiry fix:
>
> 1.rev 3435,  it fix when user search article categories, it will show
> other's article category ... (It is a serious bug)
> 2.rev 3436,  it fix the bug Jon found here:
> http://www.securityfocus.com/archive/1/491550
>
> Please let me know if these two fixes works for you.
>
> Mark
>

-- 
Jon Daley
http://jon.limedaley.com/

By swallowing evil words unsaid, no one has ever harmed his stomach.
-- Winston Churchill