Security

Systems Affected * Systems running PHP versions 4.2.0 or 4.2.1

http://www.cert.org/advisories/CA-2002-21.html

We were notified earlier this week about security problems affecting Geeklog 1.3.5[sr1] (and likely earlier versions as well).

For the impatient, We have released a full tarball branded, GeekLog-1.3.5sr2, as well as a patch. The patch only includes lib-common.php, profiles.php and search.php NOTE: if you use the patch to replace your files you must replace the line require_once('/path/to/geeklog/config.php'); with your proper path or your site will not function

If you've got time for the details, read on

Just a quick note, since it's not really a Geeklog topic but somehow affects a lot of people here nonetheless:

A severe vulnerability has been found in the Apache webserver. A posting on BugTraq has all the details.

bye, Dirk