topic Re: New security advisory and Alfresco Community Edition 4.2.f in Alfresco Archive

New security advisory and Alfresco Community Edition 4.2.f

resplin — Thu, 13 Mar 2014 20:36:47 GMT

Alfresco Community Edition 4.2.f is now available for download:http://www.alfresco.com/products/communityThis release only contains a couple of changes from 4.2.e. The changes are fixes for important security vulnerabilities. We highly recommend that all Community Edition users update.The security c

Re: New security advisory and Alfresco Community Edition 4.2.f

loftux — Fri, 14 Mar 2014 11:22:42 GMT

Are the security fixes also merged to public subversion HEAD?

Re: New security advisory and Alfresco Community Edition 4.2.f

resplin — Fri, 14 Mar 2014 16:13:23 GMT

I'm told those fixes were recently merged to head, so they should be available now.

Re: New security advisory and Alfresco Community Edition 4.2.f

m_angel82 — Mon, 30 Jun 2014 06:17:18 GMT

Hello everyone.

I know that exists a vulnerability in Alfresco Enterprise 4.1.6.13 (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2939) and I would to know if this vulnerability affects to Community version.

I write this post in this thread because the Community 4.2.f version solves some security problems, but I don't know if this version would also solve the problems describes in the Enterprise version.

Thank you very much.

Kind Regards,
Miguel.

Re: New security advisory and Alfresco Community Edition 4.2.f

mrogers — Mon, 30 Jun 2014 09:00:39 GMT

Yes it's the same issue. It's fixed everywhere.

Re: New security advisory and Alfresco Community Edition 4.2.f

louise — Sat, 02 Aug 2014 06:46:19 GMT

SEC Consult Vulnerability Lab released PoC's for another Alfresco Community (4.2.f) exploits: http://www.securityfocus.com/archive/1/532796