[bigguy]

I have just updated the Jamroom Core Downloads page:

http://www.jamroom.net/Downloads3_Core

with the newest release of Jamroom and Add-ons - version 3.4.0.

This new release is the culmination of a Jamroom Security Audit done by Gulftech Security Research and myself, where 14 potential security issues were discovered and fixed:

http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1177

I want to thank James from Gulftech for his hard work on identifying these security issues, and working with me to ensure the Jamroom code base is completely secure. While I'm disappointed that this many issues were found, I am also happy to get these fixes in to the code base and to know they won't be found by others in the future.

If you are running any version of Jamroom 3, it is _highly_ recommended that you update to the new Jamroom 3.4.0 release immediately. There are a few changes from Jamroom 3.3.8 that are not related to this security audit - a couple of extra bug fixes and changes that can be viewed in the Jamroom Tracker:

http://www.jamroom.net/index.php?m=td_tracker&o=browse

I'll be posting more details about the specific security issues in the Backstage VIP forum - due to the sensitive nature of the information, I feel this is the best place to put it. If you do not have access to the Backstage VIP forum, and are a licensed Jamroom user, make sure and re-enter one of your Jamroom licenses into the Jamroom Core downloads "unlock" form, and your access will be automatically setup.

Thanks everyone - please let me know if there are any questions. I do apologize for this new release coming so fast on the heels of Jamroom 3.3.8, but I thought it would be best to get these fixes into everyone's hands as quickly as possible.

Thanks!

- Brian


_________________
Make sure and check out:
* The Jamroom FAQ
* The Jamroom Documentation

Last edited by bigguy on 09/15/08 12:10; edited 1 time in total

[johnypneumo]

woo hoo ,thnks Bigguy !!


_________________
V7 music.com

[djslive]

Thanks Brian!!!!!!!!

[CAPER]

your the man thanks

[ussher]

you know something is in active development when there is a 5 day rest period between version releases.

Champion. Thanks.


_________________
Jamroom 4.2.0
Hosted with http://jbservers.net/
My site: apicos internet services

[GlobalEmcee]

awesome!!!

Thanks bigguy!

[williamk]

Question. I'm only after the security problems right now. Is it possible to do a manual update for the security problems? As I have customized JamRoom code too much already.

[KPM]

williamk:

Question. I'm only after the security problems right now. Is it possible to do a manual update for the security problems? As I have customized JamRoom code too much already.

Hi williamk,
A list of the changed files is here
http://www.jamroom.net/phpBB2/viewtopic.php?t=24456
and if you can't access this topic you need to follow the instructions found in the email that you recieved from Brian.

Hope this helps
Regards
Kirk


_________________
ExpressMediaPlayer Helps to prevent theft of your artist's play only video & audio media files from cache's and on board MediaPlayers.
New! Displays Add to Cart Links! JR payments pack required.
http://www.mp3express.com.au/jambeta/

[Acidphantom]

Thanks for updates all the time.


_________________
.. let the bugs come ..