Re: [Health-dev] [bug #58584] Various security issues for gnuhealth-control

2020-06-17 Thread Luis Falcon
Hi Axel, Johannes Axel, please before sending any potential vulnerability, practice coordinated disclosure. Make sure you write to "secur...@gnuhealth.org"[1] so we can discuss and apply the pertinent patches if needed. This particular context is not critical, but if it would be the case, you wou

Re: [Health-dev] [bug #58584] Various security issues for gnuhealth-control

2020-06-17 Thread Axel Braun
Hello Luis, I have already informed you three month ago in a private, encrypted mail about this issue - solution was provided on 23 March, as well in an encrypted mail. Release 3.6.4 was one month ago, and I had emphasized this to you as well. Too bad that it was ignored, as I just found out. B

Re: [Health-dev] [bug #58584] Various security issues for gnuhealth-control

2020-06-17 Thread Luis Falcon
Dear Axel On Wed, 17 Jun 2020 13:47:13 +0200 Axel Braun wrote: > Hello Luis, > > I have already informed you three month ago in a private, encrypted > mail about this issue - solution was provided on 23 March, as well in > an encrypted mail. > I know you have acted in good faith, and I apprec