Webmin Security Hole - Update Available

[Dozer]

This may be old news, and I haven't done much research into it other than updating Webmin, but Webmin's front web page states "Due to a security hole in Webmin, all users should upgrade to version 1.070."

Blake, I know you use Webmin--not sure who else, but it's something to be aware of.

-Doz

 

[blakerwry]

Thanks for being on the lookout Dozer.

I actually have 1.060 on my mandrake 9.0 box (9.1 comes with thenewest version)

However, I keep my servers firewalled and there is no outside webmin access... additionally I have setup webmin to only accept connections from the computer it's running on and my main rig...

I would hope the later part is enough to prevent a security breach... However, I know the 1st part is enough.