Email: Xerte vulnerabilities and fatal flaws - fixes available in v3.12.27 !!!

I've got an email with this text: "

Dear Xerte user,

We are sending this important message to users who have registered their Xerte installations to advise you of the recent release of 3.12.27. This latest release and revision fixes some potentially fatal flaws. We therefore recommend that you upgrade your installations (regardless of current version or revision) to 3.12.27 as a matter of urgency."

I tried to log in to the Xerte.org.uk download site. It is possible to log in to the main forum pages, but when I open the downloadpages, I've been kicked out ervery time and I'm not able to see and download any new versions. So: is this email a phishing mail, or is it something else that give problems here?

JaapJan

It certainly is not a phishing email, and you should be able to go to the download area with the same credentials that you use for the forum. So this is something else. I'll try to see what happens.

Hi there,

JaapJan mentioned receiving this alert via email. I did not receive any email and was not aware of this. Just seeing this today! Please could I have more details about the vulnerabilities and fatal flaws as I'll need to escalate this if we need to upgrade from v3.10.5.

many thanks,
Alison

Hi Alison
the message was sent to the email addresses that can be registered via the management page of Xerte installations. So if someone has registered your installation it would have gone to them. If you have access to the management area you can check that yourself but the message won't be sent again.
Send me an email and I will forward you a copy by reply but yes the recommendation is that everyone should upgrade to Xerte v3.12.27 ASAP.
HTH
Ron

Thanks Ron,

I've clicked on Register on the Admin panel and I get 'file not found,' the url refers to register.php.

many thanks for your quick response on this, much appreciated.

Hi Alison
perhaps another reason to upgrade?
TBH not sure why you are getting that error and I don't have quick access to a 3.10.5 install to check.
I've replied to your direct email.
HTH
Ron