Re: What is fixed by Hotfix 20151208?

--===============3342007294646737633==
Content-Type: multipart/alternative; boundary=001a1141bf42b17b360526682c02

--001a1141bf42b17b360526682c02
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi Wolfgang,

User ids can be gathered.


-Nathan

On Tue, Dec 8, 2015 at 1:41 PM Wolfgang Jeltsch <wls580ii-u9ERN231N2QZkvjqreKGLti2O/[email protected]=
>
wrote:

> Hi,
>
> the page under
>
>
> https://plone.org/products/plone/security/advisories/20151208-announcemen=
t
>
> says that the issue fixed by Hotfix 20151208 is =E2=80=9Cunauthorized dis=
closure
> of registered user information=E2=80=9D. I would like to know exactly wha=
t user
> information may be disclosed without this hotfix. Also (hopefully
> encrypted) passwords?
>
> All the best,
> Wolfgang
>
>
>
> -------------------------------------------------------------------------=
-----
> Go from Idea to Many App Stores Faster with Intel(R) XDK
> Give your users amazing mobile app experiences with Intel(R) XDK.
> Use one codebase in this all-in-one HTML5 development environment.
> Design, debug & build mobile apps & 2D/3D high-impact games for multiple
> OSs.
> http://pubads.g.doubleclick.net/gampad/clk?id=3D254741911&iu=3D/4140
> _______________________________________________
> Plone-Users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/plone-users
>

--001a1141bf42b17b360526682c02
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi Wolfgang,</div><div><br></div>User ids can be gath=
ered.<div><br></div><div><br></div><div>-Nathan</div></div><br><div class=
=3D"gmail_quote"><div dir=3D"ltr">On Tue, Dec 8, 2015 at 1:41 PM Wolfgang J=
eltsch &lt;<a href=3D"mailto:wls580ii-u9ERN231N2QZkvjqreKGLti2O/[email protected]">[email protected]=
base.org</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
the page under<br>
<br>
=C2=A0 =C2=A0 <a href=3D"https://plone.org/products/plone/security/advisori=
es/20151208-announcement" rel=3D"noreferrer" target=3D"_blank">https://plon=
e.org/products/plone/security/advisories/20151208-announcement</a><br>
<br>
says that the issue fixed by Hotfix 20151208 is =E2=80=9Cunauthorized discl=
osure<br>
of registered user information=E2=80=9D. I would like to know exactly what =
user<br>
information may be disclosed without this hotfix. Also (hopefully<br>
encrypted) passwords?<br>
<br>
All the best,<br>
Wolfgang<br>
<br>
<br>
---------------------------------------------------------------------------=
---<br>
Go from Idea to Many App Stores Faster with Intel(R) XDK<br>
Give your users amazing mobile app experiences with Intel(R) XDK.<br>
Use one codebase in this all-in-one HTML5 development environment.<br>
Design, debug &amp; build mobile apps &amp; 2D/3D high-impact games for mul=
tiple OSs.<br>
<a href=3D"http://pubads.g.doubleclick.net/gampad/clk?id=3D254741911&amp;iu=
=3D/4140" rel=3D"noreferrer" target=3D"_blank">http://pubads.g.doubleclick.=
net/gampad/clk?id=3D254741911&amp;iu=3D/4140</a><br>
_______________________________________________<br>
Plone-Users mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">Plon=
[email protected]</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/plone-users" rel=3D=
"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo=
/plone-users</a><br>
</blockquote></div>

--001a1141bf42b17b360526682c02--


--===============3342007294646737633==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
--===============3342007294646737633==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Plone-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/plone-users

--===============3342007294646737633==--