Archive for August 2005

Nucleus v3.22 Released

We have released Nucleus v3.22. This is a bugfix release which mainly serves as a fix for the recently discovered security issue in the PHP XML-RPC library that is used by Nucleus. Next to this fix, a number of bugfixes for problems reported in v3.2 are also included.

August 21, 2005 - Permalink

Another XML-RPC security issue

After a vulnerability was discovered in our bundled XML-RPC library earlier this year, the Hardened-PHP project did a code audit and found another security issue. They worked together with the library authors to solve the issue.

We'll be wrapping the fixed library files together with some other bugfixes into a Nucleus v3.22 release later this week. For now, a temporary fix is available:

  1. Download this file: nucleus-xmlrpc-patch.zip
  2. Extract both the files (xmlrpc.inc.php and xmlrpcs.inc.php) into your /nucleus/libs folder.
August 15, 2005 - Permalink