Security Patch for XOOPS 2.5.6
Date 2013/9/24 19:40:00 | Topic: Security
| As always, security is on top of priority list of XOOPS!
Current users of XOOPS 2.5.6 are encouraged to download and apply a Security Patch.
Download: SourceForge File Repository
This security patch fixes some potential XSS issues discovered by Mehdi Dadkhah and fixed by Richard Griffith.
While 2.5.6 Websites that have currently installed Protector are safe from this XSS vulnerability, we recommend strongly to apply this patch to ALL XOOPS 2.5.6 Websites.
It is not enough to stress that you should ALWAYS have Protector installed!!!
How to Apply the Patch:
--------------------------
You will need as minimum PHP 5.3.7
Just copy ALL the files from /htdocs folder in this Zip file to your XOOPS Website.
No other action is needed.
==============================================
For users of XOOPS Versions older than 2.5.6
==============================================
Please update AS SOON AS POSSIBLE to XOOPS 2.5.6. As always, the current versions are always the most stable and safest, i.e. older versions might be open to vulnerabilities that has been already fixed in the current version.
As of today, all XOOPS 2.5.6 versions available for download have been all patched.
Wishing everybody Happy and Safe Xoopsing!
XOOPS Core Team
2013-09-24
|
|