Ticket #752 (closed maintenance: fixed)

Opened 2 years ago

Last modified 2 years ago

Piwik 2.4.0 Update

Reported by: chris Owned by: chris
Priority: critical Milestone: Maintenance
Component: Piwik Keywords:
Cc: ed Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 0.25

Description

Piwik 2.4.0 is a new major release of Piwik! This release is rated critical. Please update now.

Security fixes

We would like to warmly thank Security researchers Aron Molnar (XSEC infosec GmbH) for reporting a XSS vulnerability which we have fixed in 2.4.0. We also thank Andrea Palazzo and Jose Luis Zayas for their security recommendations which are now implemented in 2.4.0.

​http://piwik.org/changelog/piwik-2-4-0/

Change History

comment:1 follow-up: ↓ 2 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Status changed from new to closed
  • Resolution set to fixed
  • Total Hours changed from 0.0 to 0.25

Have read the list of changes in the Changelog, ​http://piwik.org/changelog/piwik-2-4-0/

Following the wiki:PiwikServer#Updates notes, set record_statistics to 0 in /web/stats.transitionnetwork.org/piwik/config/config.ini.php then:

cd /web/stats.transitionnetwork.org/
cp piwik/config/config.ini.php .
export PIWIK="2.1.0"
wget "http://builds.piwik.org/piwik-$PIWIK.tar.gz"
tar -zxvf piwik-$PIWIK.tar.gz
cp config.ini.php piwik/config/
chown -R www-data:www-data piwik/
php /web/stats.transitionnetwork.org/piwik/console core:update
/etc/init.d/php5-fpm restart

Switched recording of stats back on by setting record_statistics to 1 in /web/stats.transitionnetwork.org/piwik/config/config.ini.php

The sites seems to be working OK, the system check is all clear ​https://stats.transitionnetwork.org/index.php?module=Installation&action=systemCheckPage&idSite=1&period=day&date=today apart from the geolocation issue, see ticket:675, so closing this ticket.

comment:2 in reply to: ↑ 1 Changed 2 years ago by chris

Replying to chris:

Have read the list of changes in the Changelog, ​http://piwik.org/changelog/piwik-2-4-0/

Following the wiki:PiwikServer#Updates notes, set record_statistics to 0 in /web/stats.transitionnetwork.org/piwik/config/config.ini.php then:

cd /web/stats.transitionnetwork.org/
cp piwik/config/config.ini.php .
export PIWIK="2.4.0"
wget "http://builds.piwik.org/piwik-$PIWIK.tar.gz"
tar -zxvf piwik-$PIWIK.tar.gz
cp config.ini.php piwik/config/
chown -R www-data:www-data piwik/
php /web/stats.transitionnetwork.org/piwik/console core:update
/etc/init.d/php5-fpm restart

Switched recording of stats back on by setting record_statistics to 1 in /web/stats.transitionnetwork.org/piwik/config/config.ini.php

The sites seems to be working OK, the system check is all clear ​https://stats.transitionnetwork.org/index.php?module=Installation&action=systemCheckPage&idSite=1&period=day&date=today apart from the geolocation issue, see ticket:675, so closing this ticket.

Note: See TracTickets for help on using tickets.