Security issues Joomla vs. update in Fantastico

[CamelMoe]

Hi

Why is not the update feature working in Fantastico when it comes to for instance Joomla 1.5.x? Whats the point to use the "Emails notification" feature to keep the sites safe then?

Yes, i know that i can do this mannually, and i did, but it would be nice to get this working.

There are major security issues with versions up to todays ver. 1.5.6.

The remote admin password reset vulnerability is block on our server per a custom mod_security rule, so it does not affect 1.5.5 on our Shared or Reseller servers.

This means you have a little time to upgrade for right now, but whenever Fantastico releases 1.5.6, we will definitely push it out.

[tobiaslw]

Originally Posted by GatorZach

The remote admin password reset vulnerability is block on our server per a custom mod_security rule, so it does not affect 1.5.5 on our Shared or Reseller servers.

This means you have a little time to upgrade for right now, but whenever Fantastico releases 1.5.6, we will definitely push it out.

I've got two questions about that ^

1) That upgrade for Fantastico would only be for the reseller and shared accounts? Or is that included with dedicated? And what would the story be with unmanaged?

2) I'm on my own unmanaged dedi and I would like to know how to impliment that rule. Is there anyone who knows this?

Thanks,

Tobias