New VM security upgrade

Submitted by sgrayban on Tue, 12/11/2012 - 01:26

It seems the release only fixed the php Pro versions and not the php GPL installs. Did you forget GPL ?

Status: 
Closed (fixed)

Comments

Submitted by helpmin on Tue, 12/11/2012 - 03:03

They did not forget it (I tested it GPL already). it is possible that your system didn't "need" the fix (in that case "congratulations").

But just to make sure that it is indeed not a bug. Please provide the virtualmin folks with more information about your system, setup and execution mode, and so on

Submitted by sgrayban on Tue, 12/11/2012 - 03:07

helpmin - I would appreciate it if you would stay out of my posts that I create. I don't need the help from you and I'm not a noobie that needs to be schooled.

Submitted by sgrayban on Tue, 12/11/2012 - 03:34

The GPL versions never showed the yellow warning box like the Pro version had so this is why I am asking about it.

Submitted by Locutus on Tue, 12/11/2012 - 04:41

I just tried to reproduce this by updating one of my GPL Virtualmins to 3.97, and the warning box does appear for me.

So instead of going all "don't school me" on helpmin, you might want to double-check if the domains on your GPL system actually ARE affected by the symlink issue.

If so, the Virtualmin guys will surely help you, but they did not "forget GPL".

Submitted by JamieCameron on Tue, 12/11/2012 - 09:53

The check is included in the GPL version. However, you won't get the yellow warning if either of the following are true :

  1. The allow_symlinks=1 line is in /etc/webmin/virtual-server/config
  2. No domains with unsafe FollowSymLinks directives were found.

Submitted by sgrayban on Tue, 12/11/2012 - 15:07

ahh ok I have the config line in that file.