Important security fix in Mono 2.8.2
Saturday, 08 January 2011
Mono 2.8.2 has just released been released. It contains an important security fix for users of ASP.NET as well as various updates to the Parallel Frameworks.

The security fix rectifies an unloading bug that can, under some circumstances, let ASP.NET applications misbehave and return the source code (.aspx) of the application or any other file in the web application directory. The Mono Project blog notes:

We strongly advise every Mono 2.8.xx user to upgrade to Mono 2.8.2 if they host web applications with it

mono

The other changes are:

  • Backport ParallelFx improvements from master (jlaval)
  • Fix state check for short-circuiting with SupportRecursion in ReaderWriterLockSlim #655361 (jlaval)
  • Increment Count even on single-processor in SpinWait. Fix #624849. (jlaval)
  • Update ThreadLocal to use default(T) for initialization with parameterless ctor. Fix #658689. (jlaval)

Related article: Mono 2.8

Banner


Court Rejects Apple's Appeal - An Epic Win
06/06/2025

Apple's latest attempt to maintain full financial control over the App Store has failed, allowing Fortite to stay in the App Store and Epic to use external methods for in-app purchases.



Apache Gravitino 0.9 Released
29/05/2025

Apache Gravitino v0.9.0-incubating has been released, with optimizations to the fileset catalogs and model catalogs, making it easier for users to manage their unstructured AI data and model data.


More News


 

Last Updated ( Saturday, 08 January 2011 )