I was one of the very first people to experience the last hack and report it on lowendtalk.com. (I posted as I got suspended by a VPS provider for excessive utilization of resources and wanted to find if anyone else had been hacked besides me.) Once the new theme without the flaw was released, I immediately updated all my 30+ virtualmin VPSs and dedicated servers through Cloudmin (a product I cannot say enough good things about, and one which I wish I had understood and paid for years ago). I hired a sysadmin to help me clean up my servers by deleting the ddos files that the hacker typically installed. To my knowledge, my installations are clean and fully update in yum as they all run on Centos 6 or 7.
My problem is that most of the installations have different versions of the authentic theme, and none have version 18.04 which I understand is the latest and fixed theme. It doesn't matter if within the theme I set the theme to autoupdate, it doesn't. It doesn't matter if I hit the override button in the theme to update, it doesn't, nothing happens.
How do I fix it so this theme autoupdates to the latest version?
Comments
Hi,
Yes, version 18.04 is the latest and fixed, having no security issues and providing best user experience.
Unfortunately, GitHub seems to change something recently in concern of establishing connections and only upcoming version of Webmin will be able to support it.
Meanwhile, you'll be able to upgrade manually, by downloading the theme to your computer and installing it via upload in Webmin Configuration->Themes.
Take a look to the following thread, for more details here: https://github.com/qooob/authentic-theme/issues/505
Submitted by MTUser2012 on Wed, 08/10/2016 - 09:29 Pro Licensee Comment #4
I see the latest version of webmin updates the theme to 18.10. Will the theme updates now work automatically or are we still stuck on manual updates?
It will work again with Webmin 1.810+