[ZendTo] Re: ZendTo: Release 4.11-13

[Harris, David]

Thanks for this.

I've got one more little question :-)

I'm doing some detailed log analysis,  - justifying a bigger server :-)  Where does SendTo get it's information from to produce the statistics about the size of uploads? I've looked through the Zendto.log, and nothing in there indicates the size of drop offs - is it getting this info from somewhere else? The webserver log?

Thanks
Dave

-----Original Message-----
From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of Jules
Sent: 17 December 2013 10:46
To: ZendTo Users
Subject: [ZendTo] Re: ZendTo: Release 4.11-13


On 17/12/2013 09:26, Harris, David wrote:
> Hi,
>
> Is this the vulnerability I picked up with our Nessus scanner?
Don't know. It's CVE-2013-6808.
>
> Also, I'm a bit of a linux idiot - what's the best way to perform the updates??
If you're running RedHat/CentOS or any other yum based system then just
     yum update zendto
should work.
If you're running Ubuntu/Debian or any other apt based system then
     apt-get update
     apt-get upgrade zendto
should work.

Jules.

>
> Dave
>
>
> -----Original Message-----
> From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of Jules
> Sent: 14 December 2013 13:47
> To: ZendTo Users
> Subject: [ZendTo] ZendTo: Release 4.11-13
>
> Folks,
>
> I have just released a new version to fix the vulnerability found by Richard Rogerson in ZendTo. It's a cross-site scripting vulnerability that I let through by mistake.
> I have done a similar test to the one Richard used to demonstrate it, and the fault is now caught correctly.
>
> Please upgrade and let me know that it works for you!
>
> Jules
>
> --
> Julian Field MEng MBCS CITP CEng
>
> South-east Iceland: Cyclonic, 5 to 7, increasing gale 8 to storm 10 in east.
> Very rough or high. Rain or squally showers. Good, occasionally poor.
>
> www.Zend.To
> Twitter: @JulesFM
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
> Jules
>
> -- 
> Julian Field MEng MBCS CITP CEng
>
> 'Adversity is like a strong wind. I don't mean just that it holds
>   us back from places we might otherwise go. It also tears away from
>   us all but the things that cannot be torn, so that afterward we see
>   ourselves as we really are, and not merely as we might like to be.'
>   - Arthur Golden
>
> www.Zend.To
> Twitter: @JulesFM
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
_______________________________________________
ZendTo mailing list
ZendTo at zend.to
http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto