MindTouch Community Portal
Logged in: Logged in as: Log in
Register
Search:
Page last modified 14:51, 27 Feb 2010 by coreyg
MindTouch Community Portal > MindTouch Community Portal > Knowledge Base > Security Hotfix (January 2010)
Page Notifications Off
Was this page helpful?

Security Hotfix (January 2010)

    Security Hotfix (January 2010)

    MindTouch identified on January 11th, 2010 a security issue that under certain server configurations, could cause administrative credentials to be disclosed. We have applied the fix to both our shipping branches, as well as providing hotfixes for older stable branches. Below are instructions on upgrading your MindTouch installations.

    Automatic Updates

    This hotfix is available through our normal upgrade mechanisms. If you can upgrade your MindTouch install please do so by following the upgrade guides that apply to your installation type:

    Manually Apply Hotfix

    If you can't upgrade your MindTouch install because of customizations, please apply the hotfix by following the instructions for the version of MindTouch that you are running:

    Linux

     Apply Patch 9.02.4

    1.  Download the patch files
    2. Extract the files
    3. Copy your old bin directory located here: /var/www/dekiwiki/bin  to a safe place
    4. Stop your MindTouch API:   /etc/init.d/dekiwiki stop
    5. Copy the contents of the extracted files into your bin directory, note the location of the bin directory is  /var/www/dekiwiki/bin 
    6. Start the MindTouch API:  /etc/init.d/dekiwiki start
    7. Verify you are able to access your MindTouch install

     Apply Patch 8.08

    1.  Download the patch files
    2. Extract the files
    3. Copy your old bin directory located here: /var/www/dekiwiki/bin  to a safe place
    4. Stop your MindTouch API:   /etc/init.d/dekiwiki stop
    5. Copy the contents of the extracted files into your bin directory, note the location of the bin directory is  /var/www/dekiwiki/bin 
    6. Start the MindTouch API:  /etc/init.d/dekiwiki start
    7. Verify you are able to access your MindTouch install

     

    Apply Patch to 8.05

    1.  Download the patch files
    2. Extract the files
    3. Copy your old bin directory located here: /var/www/dekiwiki/bin  to a safe place
    4. Stop your MindTouch API:   /etc/init.d/dekiwiki stop
    5. Copy the contents of the extracted files into your bin directory, note the location of the bin directory is  /var/www/dekiwiki/bin 
    6. Start the MindTouch API:  /etc/init.d/dekiwiki start
    7. Verify you are able to access your MindTouch install
       

    Windows

    If you are running MindTouch on Windows then to apply the patch you will need to upgrade your install using the MSI. 

    Issues, Questions, Concerns?

    If you have any questions, conerns, or issues with the patch and you have a support plan please don't hesitate to login to the Support Portal and file a ticket.  If you don't have a support plan please start a thread in our forums.

    Was this page helpful?
    Tag page
    What links here

    Files 5

    Attach file or image
    FileVersionSizeModified 
    You must login to post a comment.
    MindTouch Social Knowledge Base

    Copyright © 2011 MindTouch, Inc. Powered by