A potential security issue has been discovered with the AutoSave plugin in the habari-extras repository. If exploited, the cracker could potentially add new posts to your blog with out being an authenticated user. The updated plugin, version 0.1.2, adds a check to make sure the user is authenticated. The development version of the plugin, "trunk", for the upcoming Habari 0.7 has been rendered inoperable since it does not account for the new ACL system; …Read More
