[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security update for LedgerSMB 1.1



Oh also, when I untar, the command is:

$ tar -zxvf filename.tar.gz

correct?

- Matt

On 3/9/07, Matt Jackson <..hidden..> wrote:
Chris,

For the record, on Ubuntu Edgy 6.10 per the installation instructions
I used, it is /etc/ledger-smb.

Thanks again!

- Matt


On 3/9/07, Chris Travers <..hidden..> wrote:
> Just untar over the top of your existing implementation. No other
> steps are required for this upgrade.
>
> If you are on Linux, locating the root of your installation directory
> should be possible with one of the following commands:
>
> locate ledger-smb.conf
> or
> find / -name 'ledger-smb.conf'
>
> The first command, if supported on your system is preferable because
> it will take substantially less time.  And if you just followed the
> standard installation bit, it may be /usr/local/ledger-smb/
>
> Best Wishes,
> Chris Travers
>
> On 3/9/07, Matt Jackson <..hidden..> wrote:
> > This leads to an interesting point for "newbies": how do you upgrade?
> > I am used to using php/mysql programs such as Joomla, where the
> > upgrade procedure is simply entering the room directory (in my case,
> > usually the website root /var/www/ directory) and "bombing" it with
> > the new files by unzipping a .tar.gzip right there.
> >
> > On the other hand, I don't even really *know* where the "root"
> > directory of ledger-smb is (was just copying and pasting instructions
> > from the net in my command line, not really understanding the
> > subtleties or paying much attention to directories) and is the
> > "upgrade" procedure the same?
> >
> > Please advise.
> >
> > Best,
> > Matt J.
> >
> > On 3/8/07, Chris Travers <..hidden..> wrote:
> > > Hi;
> > >
> > > Earlier today a security vulnerability was reported to us which could
> > > allow a non-authenticated user to access administrative functions.  We
> > > have released 1.1.9 to fix this vulnerability.
> > >
> > > Anyone who cannot upgrade is advised to put admin.pl behind some sort
> > > of http authentication.
> > >
> > > Best Wishes,
> > > Chris Travers
> > >
> > > -------------------------------------------------------------------------
> > > Take Surveys. Earn Cash. Influence the Future of IT
> > > Join SourceForge.net's Techsay panel and you'll get the chance to share your
> > > opinions on IT & business topics through brief surveys-and earn cash
> > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> > > _______________________________________________
> > > Ledger-smb-users mailing list
> > > ..hidden..
> > > https://lists.sourceforge.net/lists/listinfo/ledger-smb-users
> > >
> >
> >
> > --
> > Regards,
> > Matt
> >
> > -------------------------------------------------------------------------
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to share your
> > opinions on IT & business topics through brief surveys-and earn cash
> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> > _______________________________________________
> > Ledger-smb-users mailing list
> > ..hidden..
> > https://lists.sourceforge.net/lists/listinfo/ledger-smb-users
> >
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Ledger-smb-users mailing list
> ..hidden..
> https://lists.sourceforge.net/lists/listinfo/ledger-smb-users
>


--
Regards,
Matt



--
Regards,
Matt