XOOPS: XOOPS Version 1 RC 3.0.5 released

Posted by: onokazuon 2002/9/28 20:06:33 5584 reads RC3.0.5 is released to fix a security vulnerability recently posted on Bugtraq ML.

Overview
=======
There was a vunerability when a user previews/submits a news in the News module, HTML tags were allowed to process.


Solution
=======
All users are strongly recommended to download the following packages and upgrade to this version.

New Users
Download Full RC3.0.5 Package

RC3.0.4 Users
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)

Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)


RC3.0.3 Users
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)

Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)


RC3.0.2 Users
Download RC3.0.2->RC3.0.3 Upgrade Package (zip)
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)

Download RC3.0.2->RC3.0.3 Upgrade Package (tar.gz)
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)


RC3.0.1 Users
Download RC3.0.1->RC3.0.2 Upgrade Package (zip)
Download RC3.0.2->RC3.0.3 Upgrade Package (zip)
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)

Download RC3.0.1->RC3.0.2 Upgrade Package (tar.gz)
Download RC3.0.2->RC3.0.3 Upgrade Package (tar.gz)
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)


RC3.0.0 Users
Download RC3.0.0->RC3.0.1 Upgrade Package (zip)
Download RC3.0.1->RC3.0.2 Upgrade Package (zip)
Download RC3.0.2->RC3.0.3 Upgrade Package (zip)
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)

Download RC3.0.0->RC3.0.1 Upgrade Package (tar.gz)
Download RC3.0.1->RC3.0.2 Upgrade Package (tar.gz)
Download RC3.0.2->RC3.0.3 Upgrade Package (tar.gz)
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)


Note
======
From this release, users are not allowed to use HTML tags when posting news/comments. As for forum posts, users can still use HTML as long as HTML tags are enabled in the posting forum. However, we advise you to always disable HTML posts in forums as well.