OML version 2.5.2

Release of version 2.5.2 of OML2
Added by Jolyon White about 1 year ago

We are pleased to announce the release of OML version 2.5.2.

Release date: 2011-03-17

This release is a bugfix release which fixes Issue #523 and partially fixes #168. Ubuntu packages are now available in our package repository, and a new source tarball is also available in the download section of the OML web site.

Issue #523 caused strings stored in the database to sometimes contain extra junk at the end. Issue #168 addresses SQL string escaping. This patch modifies the SQL statement building code in the oml2-server to put double quote marks around all table and column names. This allows SQL keywords to be used as column names, or spaces in column names, for example. However, this version is still vulnerable to SQL injection.

Please send mail to our mailing list if you have any trouble with this release.


Comments