[Loris-dev] LORIS Release 17.0.3

[Christine Rogers]

Hi Everyone,
The new minor release 17.0.3 is now available on Github
<https://github.com/aces/Loris/releases>.

All users of the LORIS 17.0 branch are strongly urged to upgrade immediately

This release fixes two security holes introduced in features added in the
LORIS v17.0.0 including a remote code execution exploit in one of the
BrainBrowser ajax scripts.  For existing projects using the MRI violations
module, the link to launch BrainBrowser is now disabled.

Some minor bug fixes found since v17.0.2 are also incorporated.

(All pull requests in Loris 17.*
<https://github.com/aces/Loris/pulls?utf8=%E2%9C%93&q=is%3Amerge%20is%3Apr%20milestone%3A17.0%20>
)
Thanks,
Christine

-- 
christine.rogers at mcgill.ca
LORIS data systems | loris.ca
McGill Centre for Integrative Neuroscience | MCIN.ca
McConnell Brain Imaging Centre
Montreal Neurological Institute
McGill University | Montreal | Canada
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.bic.mni.mcgill.ca/pipermail/loris-dev/attachments/20170510/fdab5f5e/attachment.html>