Skip to content
This repository has been archived by the owner on Feb 14, 2020. It is now read-only.

Ships insecure swfupload binaries #547

Closed
thijskh opened this issue Dec 17, 2014 · 0 comments · Fixed by #549
Closed

Ships insecure swfupload binaries #547

thijskh opened this issue Dec 17, 2014 · 0 comments · Fixed by #549
Assignees
@relaxnow
Labels
3 - Done security
Milestone
audit2014

Comments

@thijskh
Copy link
Contributor

thijskh commented Dec 17, 2014

Janus includes swfupload binaries for some reason. They are old and not maintained for security fixes.

There's a security-maintained version at https://github.com/WordPress/secure-swfupload. But rather I wonder why this is needed at all and would vastly prefer a flash-free Janus.
relaxnow pushed a commit that referenced this issue Dec 18, 2014
Remove file upload as a valid metadatafield type, fixes #547 and fixes …
7896aff 
…#544
@relaxnow relaxnow mentioned this issue Dec 18, 2014
Merged
relaxnow pushed a commit that referenced this issue Dec 18, 2014
Remove file upload as a valid metadatafield type, fixes #547 and fixes …
37625f0 
…#544
relaxnow pushed a commit that referenced this issue Dec 18, 2014
Remove file upload as a valid metadatafield type, fixes #547 and fixes …
7488446 
…#544
@thijskh thijskh added this to the audit2014 milestone Dec 18, 2014
@relaxnow relaxnow mentioned this issue May 13, 2015
Merged
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@relaxnow relaxnow

Labels
3 - Done security
Projects
None yet
Milestone
audit2014
Development

Successfully merging a pull request may close this issue.

[REVIEW] Remove file upload as a valid metadatafield type janus-ssp/janus
2 participants
@relaxnow @thijskh