[NCUC E-team] E-team Digest, Vol 23, Issue 5

Fri Dec 12 12:21:49 CET 2014

Dear All,

Yes, I tried updating it a few days ago, but it demanded for username,
password etc to the databaseŠ I wasn¹t sure, so decided to leave it and
update the plugins instead.

I had planned to reach out to Tapani, before I saw this email.

I would still need to know the details to put in next time, so, please
Tapani can you show me?

Thank you so much.

Many thanks,
-- 
Maryam Bakoshi
Secretariat  NCSG, NCUC, NPOC
Internet Corporation for Assigned Names and Numbers (ICANN)

Email:  maryam.bakoshi at icann.org
Mobile:  +44 7737 698036
Skype:  maryam.bakoshi.icann

On 12/12/2014 11:00, "e-team-request at lists.ncuc.org"
<e-team-request at lists.ncuc.org> wrote:

>Send E-team mailing list submissions to
>	e-team at lists.ncuc.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>	http://lists.ncuc.org/cgi-bin/mailman/listinfo/e-team
>or, via email, send a message with subject or body 'help' to
>	e-team-request at lists.ncuc.org
>
>You can reach the person managing the list at
>	e-team-owner at lists.ncuc.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of E-team digest..."
>
>
>Today's Topics:
>
>   1. Wordpress (Tapani Tarvainen)
>   2. Re: FW: New subscription request to list E-team from
>      anivar.aravind at gmail.com (Tapani Tarvainen)
>   3. Re: Wordpress (Tapani Tarvainen)
>   4. Re: Wordpress (Tapani Tarvainen)
>   5. Re: Wordpress (William Drake)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Thu, 11 Dec 2014 16:41:02 +0200
>From: Tapani Tarvainen <ncuc at tapani.tarvainen.info>
>To: e-team at lists.ncuc.org
>Subject: [NCUC E-team] Wordpress
>Message-ID: <20141211144102.GB22170 at tehanu.it.jyu.fi>
>Content-Type: text/plain; charset=us-ascii
>
>All,
>
>I just realized (as I guess I should've done long ago)
>nobody's been updating Wordpress since... 2013, apparently,
>and it's gotten way behind - in particular, it has
>the currently widely exploited vulnerability.
>Ir really should be updated ASAP.
>
>I'm rather seriously busy now but I'll try to find the time
>to do it soon, but still, a question: is there anybody else
>in our e-team who'd be even remotely comfortable of the idea
>of doing updating wordpress?
>(The only non-trivial part are the custom plugins, and
>I'm pretty sure they'll all work unchanged.)
>
>-- 
>Tapani Tarvainen
>
>
>------------------------------
>
>Message: 2
>Date: Thu, 11 Dec 2014 16:44:53 +0200
>From: Tapani Tarvainen <ncuc at tapani.tarvainen.info>
>To: e-team at lists.ncuc.org
>Subject: Re: [NCUC E-team] FW: New subscription request to list E-team
>	from anivar.aravind at gmail.com
>Message-ID: <20141211144453.GC22170 at tehanu.it.jyu.fi>
>Content-Type: text/plain; charset=us-ascii
>
>On Dec 08 10:28, Maryam Bakoshi (maryam.bakoshi at icann.org) wrote:
>
>> Dear all,
>> 
>> I received this approval request today, please can anyone kindly tell me
>> who the below is and if they need to be approved?
>
>I guess it'd be up to EC or the Chair to formulate rule for this...
>actually I seem to recall Bill already did: if they're NCUC
>members approve, period.
>
>To open that up a bit: look them up in the database, if they're there
>approve, otherwise ask them if they're NCUC member who've used another
>address when joining or what.
>
>-- 
>Tapani Tarvainen
>
>
>------------------------------
>
>Message: 3
>Date: Thu, 11 Dec 2014 17:17:35 +0200
>From: Tapani Tarvainen <ncuc at tapani.tarvainen.info>
>To: e-team at lists.ncuc.org
>Subject: Re: [NCUC E-team] Wordpress
>Message-ID: <20141211151735.GA12518 at tarvainen.info>
>Content-Type: text/plain; charset=us-ascii
>
>On Thu, Dec 11, 2014 at 04:41:02PM +0200, Tapani Tarvainen
>(ncuc at tapani.tarvainen.info) wrote:
>
>> I just realized (as I guess I should've done long ago)
>> nobody's been updating Wordpress since... 2013, apparently,
>> and it's gotten way behind - in particular, it has
>> the currently widely exploited vulnerability.
>
>Looking a bit closer, it's not as bad as I feared
>(in particular comments aren't allowed, and the worst
>hole is in the comments plugin). There are a number of
>less critical bugs though, so, nonetheless:
>
>> It really should be updated ASAP.
>
>-- 
>Tapani Tarvainen
>
>
>------------------------------
>
>Message: 4
>Date: Fri, 12 Dec 2014 09:17:38 +0200
>From: Tapani Tarvainen <ncuc at tapani.tarvainen.info>
>To: e-team at lists.ncuc.org
>Subject: Re: [NCUC E-team] Wordpress
>Message-ID: <20141212071737.GF27169 at tehanu.it.jyu.fi>
>Content-Type: text/plain; charset=us-ascii
>
>I've updated Wordpress (to 4.01, latest and greatest),
>haven't found anything broken yet.
>
>WPScan still warns about Slideshow plugin, though;
>I'm not sure how serious it is, will investigate.
>
>-- 
>Tapani Tarvainen
>
>
>------------------------------
>
>Message: 5
>Date: Fri, 12 Dec 2014 08:36:19 +0100
>From: William Drake <wjdrake at gmail.com>
>To: Tapani Tarvainen <ncuc at tapani.tarvainen.info>
>Cc: e-Team <e-team at lists.ncuc.org>
>Subject: Re: [NCUC E-team] Wordpress
>Message-ID: <7F35DC88-784B-4E3E-9DDA-185268C81A9F at gmail.com>
>Content-Type: text/plain; charset=utf-8
>
>Tapani,
>
>Sorry to have been distracted while this was going on.  As always, many
>thanks for seeing the problem and finding the solution.
>
>Maryam and other tech folks, this sounds like something we should have
>some distributed tracking of going forward?
>
>Cheers
>
>Bill
>
>> On Dec 12, 2014, at 8:17 AM, Tapani Tarvainen
>><ncuc at tapani.tarvainen.info> wrote:
>> 
>> I've updated Wordpress (to 4.01, latest and greatest),
>> haven't found anything broken yet.
>> 
>> WPScan still warns about Slideshow plugin, though;
>> I'm not sure how serious it is, will investigate.
>> 
>> -- 
>> Tapani Tarvainen
>> _______________________________________________
>> E-team mailing list
>> E-team at lists.ncuc.org
>> http://lists.ncuc.org/cgi-bin/mailman/listinfo/e-team
>
>
>
>------------------------------
>
>_______________________________________________
>E-team mailing list
>E-team at lists.ncuc.org
>http://lists.ncuc.org/cgi-bin/mailman/listinfo/e-team
>
>
>End of E-team Digest, Vol 23, Issue 5
>*************************************