Hi Bertrand, I am using a source code enlistment to build a custom Azure package. Would I be right in thinking that I just need to roll my code forward to changeset dbec3d05e6d1 in order to include the fix??
Cheers Sam On Wed, Dec 21, 2011 at 7:59 AM, Bertrand Le Roy < bertrand.le....@microsoft.com> wrote: > Yes.**** > > ** ** > > *From:* Carlos Eduardo Miranda [mailto:cadu.mira...@gmail.com] > *Sent:* Tuesday, December 20, 2011 3:57 PM > *To:* orchard-discuss@lists.outercurve.org > *Subject:* Re: Update available**** > > ** ** > > Bertrand,**** > > **** > > Is the version that is downloaded from the Platform Installer, already > with this patch applied ?**** > > **** > > Thanks in advance.**** > > **** > > Carlos Miranda**** > > On Tue, Dec 20, 2011 at 9:03 PM, Bertrand Le Roy < > bertrand.le....@microsoft.com> wrote:**** > > Dear Orchard community members, **** > > We just published an updated version of Orchard. This fixes an issue that > could have enabled a form of open redirection > attack<http://www.asp.net/mvc/tutorials/security/preventing-open-redirection-attacks>. > We made it very easy for existing Orchard instances to be upgraded by > providing patch files for each version from 1.0 to 1.3: **** > > · From 1.3.9 to 1.3.10: > http://orchard.codeplex.com/releases/69668/download/316960 **** > > · From 1.2.41 to 1.2.42: > http://orchard.codeplex.com/releases/65184/download/316961 **** > > · From 1.1.30 to 1.1.31: > http://orchard.codeplex.com/releases/59918/download/316962 **** > > · From 1.0.20 to 1.0.21: > http://orchard.codeplex.com/releases/50197/download/316966 **** > > To apply the patch, extract the zip file, backup your existing version of > the dll that is in the bin directory of your site and then copy the new dll > into bin.**** > > **** > > > > > -- > > Abraços. > > Atenciosamente,**** > > **** > > *Carlos Eduardo Cícero Miranda* > Group Manager **** > > *Mobile:* +55 (21) 8283-4060**** > > *Email:* cadu.mira...@gmail.com > *http://www.linkedin.com/in/cadumiranda***** > > *Microsoft .Net Developer Brasil *<http://www.linkedin.com/groups?gid=1774385> > **** > > See who we know in common <http://www.linkedin.com/e/wwk/22971750/> **** > > ** ** >