Question about TTX Vulnerability Report

[pshtc]

I'm wanting to confirm that this vulnerability does not affect version 2.24. Thanks for your response.

[Alex]

The TTXFile.pm is vulnerable for ALL versions. Make sure the one you have shows revision 759 or greater.

The TTXImage.pm is vulnerable for 3.x versions (2.x simply does not have the file). Make sure the one you have shows revision 765 or greater.

Both files may be deleted safely (help desk operations will not be interrupted, just no file upload controls on contact form).

Please delete first, then look for update.

How to check revision: open the file (it's plain text), look for line that reads

Code:

# $Revision: nnn $

The nnn is the revision number. The revision number is not the version number. It is the number, that source code repository automatically assigns to a file on each commit (logged change).

Further info (including download links) is here

http://www.troubleticketexpress.com/alert.html

[pshtc]

I'll need some clarification on the TTXFile.pm file. Our version contains the TTXFileTickets.pm file, but not the TTXFile.pm file. Is this the same? If this needs changed, the locations that I'm finding to update it doesn't have the latest revision. Thanks for the help.

[Alex]

TTXFileTickets.pm is not TTXFile.pm.

If you have neither TTXFile.pm nor TTXImage.pm installed, no action required.

[pshtc]

Thanks for your help!