Comments on: vtiger CRM 5.0.4 Security Patch Release

By: Carlo Beschi

Carlo Beschi — Fri, 14 Nov 2008 11:34:34 +0000

Hi,

definitely a good move.

Here’s the link to the unified diff on trac.vtiger.com for those who like to patch the install using patch command instead of overwriting existing files:

http://trac.vtiger.com/cgi-bin/trac.cgi/changeset?old_path=vtigercrm%2Fbranches%2F5.0.4&old=12052&new_path=vtigercrm%2Fbranches%2F5.0.4&new=12177

Keep up the great work!

carloz

By: Manilal K M

Manilal K M — Fri, 14 Nov 2008 11:53:35 +0000

@vtiger team:
It may be nice if the vtiger version number is also updated. This will help administrators in identifying the latest version. If the core release and patch are separately maintained , then there is high chance for missing the security patches.

@Carlo
Thanks for posting the link to unified diff. The vtiger release maintainers always missed it.

By: JSThePatriot

JSThePatriot — Tue, 18 Nov 2008 15:58:18 +0000

@Carloz
Thanks for the diff update. I was about to ask someone for one. Great work.

Jarvis

By: salvador mm

salvador mm — Fri, 28 Nov 2008 23:28:49 +0000

Hello, thank you very much for the contributions.

My comment: After installing the patch is impossible to see the list of users of the module for configuration, I do not see anything, just the title of the module.

You will have some experience with that, how can I resolve it?

Regards.

Salvador M.

By: nitin goyal

nitin goyal — Mon, 01 Dec 2008 07:51:02 +0000

Hi Salvador M.

We are unable to reproduce the issue reported by you, we need some more information to reproduce it, for that can you provide your server access on which vtigerCRM is installed.

Regards,
Nitin
Vtiger Team

By: chavamm

chavamm — Mon, 01 Dec 2008 15:48:09 +0000

Hi Nitin:

Thanks, you can tell me your email address for send my server information? you need a nick for access?

Thanks.
Regards

Salvador M.

By: Nitin Goyal

Nitin Goyal — Fri, 05 Dec 2008 06:21:27 +0000

Hi J. Salvador Martínez,

We are able to find the cause of your issue, its with your directory permission and no where related to the security patch.

Please go through this link (http://wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_Installation_Manual_for_Linux#Prerequisites_2) before installing the vtiger CRM for the directory permissions otherwise some things will not work in CRM properly.

Regards,
Nitin
Vtiger Team

By: winelover80538

winelover80538 — Wed, 07 Jan 2009 19:10:42 +0000

Greetings, Asha. I was wondering about the process for backing up the source directory. Sorry for my ignorance but I’m a MS guy not a LI(U)NIX guy (please don’t shoot me!) and this is unfamiliar territory.

Thanks,

WineLover80538

By: Asha

Asha — Thu, 08 Jan 2009 06:08:12 +0000

Hi WineLover80538,

When we say backup your source directory, we just mean that keep a copy of the source directory somewhere else. Just to make sure that if anything goes wrong, you can copy back your old source.

Regards,
Asha
Vtiger Team

By: Josh Curry

Josh Curry — Thu, 08 Jan 2009 17:35:55 +0000

What is the average response time for patches when security vulnerabilities are discovered?

By: Belen

Belen — Tue, 27 Jan 2009 15:19:17 +0000

Excellent work guys!, so many enhancements,
It’s the best CRM ever

By: ganiwo

ganiwo — Tue, 24 Mar 2009 14:57:24 +0000

Hi,

Is it recommendend to patch fresh installation before calling install.php, because it seems so from install script changes point of view?

Regards,

ganiwo

By: mowgli

mowgli — Sat, 11 Jul 2009 02:14:35 +0000

what is the proper patch command to use? i keep getting failed to execute errors when i try a dry run.

my src dir = /var/www/html/salescrm

so i dl and untar the zip to that dir. then i copy and paste the unified patch file into a new file (patch.txt) in that same src dir. then i run:

patch –dry-run -verbose -p3

By: mowgli

mowgli — Sat, 11 Jul 2009 02:17:29 +0000

what is the proper patch command to use? my src dir = /var/www/html/salescrm, so i dl and unzip to that dir. then i copy and paste the unified patch file into a new file (patch.txt) in that same src dir. then i run:

patch –dry-run -verbose -p3

By: mowgli

mowgli — Sat, 11 Jul 2009 02:20:57 +0000

patch –dry-run -verbose -p3 (used less than symbol here) patch.txt

but each patch attempt says hunk 1 (or 1 & 2) failed. i tried unzipping into vtigercrm/branches/5.0.4/ dir i made in the src dir. same result. am i unzipping to the wrong dir? am i using the wrong command? am i running it from the wrong dir? all of the above?

thanx for your help.

By: Asha

Asha — Sat, 11 Jul 2009 10:07:11 +0000

Hi mowgli,

All you need to do is unzip the patch into your vtiger CRM source directory. (i.e., /var/www/html/salescrm)

Regards,
Asha
Vtiger Team

By: Asha

Asha — Sun, 12 Jul 2009 17:52:09 +0000

Hi mowgli,

It will not overwrite all the files in the directory, but will overwrite only those files which we have included in the patch. As long as you have not done any customization over the 5.0.4 source, you can go ahead and unzip the patch without any fear.

Regards,
Asha

By: mowgli

mowgli — Sun, 12 Jul 2009 21:09:19 +0000

so if i did have customization, would the patch command be the way to integrate the patch w/o altering my own changes?

either way i’d like to know what the proper patch command/method/procedure is just for my own knowledge.

but asha thanx for telling me how it would work w/o using the patch cmd.

so anyone? what am i doing wrong (desc above)?