@chamilosecurity

open source e-learning & collaboration software

chamilo.org
Joined January 2010
  • Tweets59
  • Following6
  • Followers194
[1/2] Two critical vulnerabilities affect all PHP versions today. To protect your server and Chamilo, please apply one of the following methods: 1. upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 2. change your PHP config (php.ini, not .htaccess or ini_set() by adding this...
1
3
236
[2/2] ...at the end: # temporary fix for critical CVEs memory_limit=-1 post_max_size = 32M upload_max_filesize = 16M session.upload_progress.enabled=0 fatal_error_backtraces=0 # only for php 8.5 See php.net/index.php#2026-10-20… for details (CTRL+F5 if it doesn't show today's post)

www.php.net

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

php.net
1
1
165
Apply ";" or "#" depending on where you define those variables
4
Long time no see! We have just released Chamilo 3.0.1. This version includes fixes for several vulnerabilities detected in Chamilo 2.0.* and 3.0.0. Please update soon to avoid service interruption or undesired data access. chamilo.org/en/download/
1
55
Chamilo Security retweeted
Chamilo News@chamilo_newsJun 29
Security patch versions Chamilo 1.11.40 and 2.0.3 have been released with important security fixes. Please update your Chamilo installation to keep your system and your users safe. chamilo.org/en/download/
3
2
268
We have just released version 1.11.38 of Chamilo at record speed, fixing multiple issues, some of them CRITICAL. Notably, one of these was accessible without authentication. Please update as soon as possible to protect your Chamilo portal and the personal data of your users.
Chamilo Security@chamilosecurityMar 23
🚨We have received several reports of Chamilo 1.11.* (including 1.11.36) portals getting cracked on the basis of a new unauthenticated RCE vulnerability. It only affects portals with the main/install/ directory. If you still have it, please remove it ASAP! [1/2]
1
79
Security advisories will be published within 2 weeks of today.
18
🚨We have received several reports of Chamilo 1.11.* (including 1.11.36) portals getting cracked on the basis of a new unauthenticated RCE vulnerability. It only affects portals with the main/install/ directory. If you still have it, please remove it ASAP! [1/2]
1
2
1
133
We are actively working on a fix and will provide a new version for download in the next few hours. Please also check for scripts like rce_[somenumber].php or up_[some-number].php in your files, and verify configuration.php for any added code like file_put_contents() and remove
1
27
Also make sure database server details at the beginning of app/config/configuration.php are the correct ones, as the file might have been modified. If you use web services, also update the value of security_key in configuration.php.
15
📢Chamilo 1.11.36 is now available for download. It contains a few more fixes to vulnerabilities of different types (on top of 1.11.34, released recently). Please update your Chamilo platform soon. chamilo.org/en/download/
2
41
📢Chamilo 1.11.34 is now available for download. It contains a number of fixes to vulnerabilities of different types, 1 of them CRITICAL. Please update your Chamilo platform as soon as possible to avoid data loss/theft. chamilo.org/en/download/
2
2
46
Today, we have released Chamilo 1.11.32, which includes many vulnerability fixes (through 1.11.30). Please update soon. Stay safe. chamilo.org/en/download/
40
🪂Chamilo 1.11.28 has just landed, with many security fixes. Update today to help secure the Chamilo network. Together, we are stronger! 🚀 chamilo.org/download
1
4
3
102
Our security page has been updated accordingly github.com/chamilo/chamilo-l…

security issues

Chamilo is a learning management system focused on ease of use and accessibility - chamilo/chamilo-lms

github.com
1
1
42
New reports of vulnerabilities have been appearing since early this week. These vulnerabilities have been addressed (as indicated in the original report by Quarkslab) but they consist of individual patches. We are working on a 1.11.28 release which includes those fixes.
1
2
49
Chamilo Security retweeted
Chamilo News@chamilo_news27 Sep 2023
Chamilo 1.11.26 is out 🥳This version includes highly-recommended security updates and a few improvements on top of the previous version. Please update ASAP to keep your data and servers safe. chamilo.org/download
1
13
2
10
767
New critical vulnerabilities have been discovered (and fixes are available) in Chamilo 1.11.24. We urge you to update to 1.11.26 ASAP to avoid any issue with user data. Download 1.11.26 from github.com/chamilo/chamilo-l… or check each patch at support.chamilo.org/projects…
1
118
A new vulnerability (IDOR) has been detected, affecting Chamilo 1.11 portals installed or updated since 2017. Admins are encouraged to use the patch available here support.chamilo.org/projects… (affecting only 2 files for Chamilo 1.11.22) or to update as soon as 1.11.24 is released.
2
2
118
All known vulnerabilities have been patched in this new version. Updating your portal using the standard update procedure (backup, then overwrite files on your existing portal) is the easiest possible way to keep your data and servers safe. Please take the appropriate action soon
Chamilo News@chamilo_news5 Aug 2023
Chamilo 1.11.22 is out 🥳 This version includes highly-recommended security updates and a few improvements on top of the previous version. Please update ASAP to keep your data and servers safe. chamilo.org/download
2
2
92
Load more