Serendipity 0.8.5 release (security fix) and 0.9-beta1

Post Reply
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Serendipity 0.8.5 release (security fix) and 0.9-beta1

Post by garvinhicking »

Hello!

Because of a security issue, Serendipity 0.8.5 has been released. Read more here:

http://blog.s9y.org/archives/69-Serendipity-0.8.5.html

Also, our long awaited 0.9 release has it's first beta release ("Release Candidate" in our terms...). Read more here:

http://blog.s9y.org/archives/70-Serendi ... beta1.html
Last edited by garvinhicking on Sun Nov 06, 2005 2:28 pm, edited 1 time in total.
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
oxygenws
Regular
Posts: 148
Joined: Thu Jan 20, 2005 11:20 am
Location: Iran
Contact:

Post by oxygenws »

Thanks Garvin for your fast support :) (and thanks to Nenad :D)

Dear Garv.

Didn't you plan to support auto-update in your 0.9 release?! a daily or weekly auto-update?

regards.
My Blog, powered by s9y is http://oxygenws.com/blog/
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

No, I never planned that. I always said this will never be implemented because it would require world-writable s9y installation, which I do not ever want to propose. :)

We thought about giving upgrade notices on the backend, but I haven't got the time to look at that yet. The backend_rss plugin baiscally can do this by showing the blog.s9y.org feed...

Regards.
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
davidcrickett
Regular
Posts: 83
Joined: Sat Oct 01, 2005 10:25 am
Location: Denmark
Contact:

Post by davidcrickett »

garvinhicking wrote:No, I never planned that. I always said this will never be implemented because it would require world-writable s9y installation, which I do not ever want to propose. :)

We thought about giving upgrade notices on the backend, but I haven't got the time to look at that yet. The backend_rss plugin baiscally can do this by showing the blog.s9y.org feed...

Regards.
Garvin
Ah, good idea! :idea:
oxygenws
Regular
Posts: 148
Joined: Thu Jan 20, 2005 11:20 am
Location: Iran
Contact:

Post by oxygenws »

what about FTP? auto-update via FTP?

is it not safer :> but it is very EASY to automatically update every week.
My Blog, powered by s9y is http://oxygenws.com/blog/
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

Doing FTP via PHP would either require FTP extensions or a PHP userspace implementation, which is a bit slow. So you could easily garbage your whole blog because of Server timeouts, broken connections or whatever. So this could be very unstable.

Maybe someone wants to have a go at that? It could be coded into the spartacus plugin, or maybe even in the new backup plugin by dma147...

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
oxygenws
Regular
Posts: 148
Joined: Thu Jan 20, 2005 11:20 am
Location: Iran
Contact:

Post by oxygenws »

Thanks Garvin.
as you said, FTP is not the needed service, but..... :(
i'll thinking about it more n more, try to find an strange way, it should have at least ONE way :)
My Blog, powered by s9y is http://oxygenws.com/blog/
Guest

Post by Guest »

hi, i've got some corrupt s9y-0.8.5.tar.gz files from sourceforge.net, tho i suspect it's from your side. i tried ovh.sf.net, mesh, puzzle.. they all corrupted. any other sources where i can download the file?
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

I just downloaded the file several times (http://peterhost.dl.sourceforge.net/sou ... 8.5.tar.gz) and have no corruption. Can you check your network connection or download from a different compute?

Best regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Guest

Post by Guest »

well, as far as i know, i downloaded several other tar.gz files while & after that, they came out fine, so i didn't think it was my network. maybe because i use winrar to unpack them? but same thing happened with those files too.

have you tried on those servers i mentioned? sourceforge isn't faultless right, sometimes they're missing new release on some of their servers, takes a several days to finally updated.
Guest

Post by Guest »

s9y.tar.gz from that server you told me, http://peterhost.dl.sourceforge.net/, i got error on too, so i guess it's normal :? ? but i had errors on fresh install,

Code: Select all

/Table 'serendipity.sentries' doesn't exist
etc...

maybe i should wait till v1.0
garvinhicking
Core Developer
Posts: 30022
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Post by garvinhicking »

The error definitely comes from a garbaged download! I honestly suspect that you or your provider has network issues.

Please try to download the file from here:

http://www.openusability.org/project/sh ... oup_id=155

Best regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
Post Reply