Postnuke Vulnerabilities found

[songdove]

Not sure where this should go, so if it needs to move, I don't mind:

http://forums.postnuke.com/index.php?name=PNphpBB2&file=viewtopic&t=38198&start=0&postdays=0&postorder=asc&highlight=

This outlines a newly found vulnerability in postnuke .726.  There appear to be quite a few problems still associated with upgrading sites to .750, so I have posted a couple queries, one regarding multisite upgrades, and one regarding whether or not the last few .726 patches will handle this problem or not.

I don't have a linux box to test out an upgrade situation offline, and the trib hosting account doesn't appear to have enough space on it to add a complete test installation.  So I may have to take the site "offline" for awhile to try to get this completed. 

I just thought to post this here in case anyone else has a postnuke .726 installation.

[AlphaWolf]

Not sure where this should go, so if it needs to move, I don't mind:

http://forums.postnuke.com/index.php?name=PNphpBB2&file=viewtopic&t=38198&start=0&postdays=0&postorder=asc&highlight=

This outlines a newly found vulnerability in postnuke .726.  There appear to be quite a few problems still associated with upgrading sites to .750, so I have posted a couple queries, one regarding multisite upgrades, and one regarding whether or not the last few .726 patches will handle this problem or not.

I don't have a linux box to test out an upgrade situation offline, and the trib hosting account doesn't appear to have enough space on it to add a complete test installation.  So I may have to take the site "offline" for awhile to try to get this completed. 

I just thought to post this here in case anyone else has a postnuke .726 installation.

Thanks for posting this Songdove.

How much more room do you need to put up a test installation?  We will set it up.

[songdove]

The amount you suggested in the trouble ticket should more than cover it.  It appears there is roughly just over 200 megs free right now, I'll be doing a backup of the entire site, database and all, then seeing about importing the database into a new database, installing the new code sets - postnuke .750 and PNphpBB2 1.2g - and testing.  If successful, I'll follow the same steps I took for the existing database.  Thanks so much, that will reduce downtime by quite a bit.

[AlphaWolf]

The amount you suggested in the trouble ticket should more than cover it.  It appears there is roughly just over 200 megs free right now, I'll be doing a backup of the entire site, database and all, then seeing about importing the database into a new database, installing the new code sets - postnuke .750 and PNphpBB2 1.2g - and testing.  If successful, I'll follow the same steps I took for the existing database.  Thanks so much, that will reduce downtime by quite a bit.

No problem - i will handle that today.

peace

wolf