Author Topic: New version: 2.3i  (Read 6562 times)

0 Members and 1 Guest are viewing this topic.

Offline rejetto

  • Administrator
  • Tireless poster
  • *
  • Posts: 12903
    • View Profile
New version: 2.3i
« on: June 14, 2016, 10:55:27 PM »
This is a very important security update.
Please go to:
Menu > updates > check for news/updates

what's new
+ Report range for partial downloads in the log http://www.rejetto.com/forum/hfs-~-http-file-server/add-to-log-range-(starting-and-ending-byte)/
- fixed Remote Command Execution http://www.rejetto.com/forum/bug-reports/execution-exploit/
- {.add header.} wasn't overwriting existing headers
- temporary files not deleted
- incorrect handling of empty rows in ban tables

Offline TrippTeam

  • Occasional poster
  • *
  • Posts: 13
    • View Profile
    • TrippTeam
Re: New version: 2.3i
« Reply #1 on: June 15, 2016, 08:41:13 AM »
ok i saw that update where is the link to that version ?
it was impossible to do a update in HFS

ok i found it because i have edit the exe it create a exe with  .new.
size 2 443 kb old exe 2 442 kb


Build 297 hfs say now
« Last Edit: June 15, 2016, 08:47:47 AM by TrippTeam »

Offline LeoNeeson

  • Tireless poster
  • ****
  • Posts: 498
  • Solitario...
    • View Profile
    • twitter.com/LeoNeeson
Re: New version: 2.3i
« Reply #2 on: June 15, 2016, 01:32:05 PM »
- {.add header.} wasn't overwriting existing headers
Great, thank you! (tested/working) :)
• HFS ahora también disponible en Español! (Clic aqui) :)
• HFS is now also available in Spanish! (Click here)

Offline MarkV

  • Tireless poster
  • ****
  • Posts: 746
    • View Profile
Re: New version: 2.3i
« Reply #3 on: June 15, 2016, 11:07:07 PM »
First time I've seen a warning message at update time. Unfortunately that very warning message blocks the auto-update that would have brought HFS up to date without much adoe!  ;)

Gratz for fixing that fast.
http://worldipv6launch.org - The world is different now.

Offline LeoNeeson

  • Tireless poster
  • ****
  • Posts: 498
  • Solitario...
    • View Profile
    • twitter.com/LeoNeeson
Re: New version: 2.3i
« Reply #4 on: June 16, 2016, 06:32:04 AM »

Yeah, that warning message was a nice idea to bring attention about this security update. And it was fixed very quickly. :)
• HFS ahora también disponible en Español! (Clic aqui) :)
• HFS is now also available in Spanish! (Click here)

Offline r2fi

  • Occasional poster
  • *
  • Posts: 3
    • View Profile
Re: New version: 2.3i
« Reply #5 on: June 16, 2016, 11:11:27 AM »
+1 for the warning message, update was smooth. All working ok so far ! Thanks for the support rejetto.

Offline rejetto

  • Administrator
  • Tireless poster
  • *
  • Posts: 12903
    • View Profile
Re: New version: 2.3i
« Reply #6 on: June 19, 2016, 09:30:39 AM »
i'm sorry some of you had a problem with the update.
I just tested and it went fine for me, after i clicked OK on the warning message, it auto-updated.
I couldn't reproduce the problem, so i don't know how to fix it.

Offline Mars

  • Operator
  • Tireless poster
  • *****
  • Posts: 1859
    • View Profile
Re: New version: 2.3i
« Reply #7 on: June 19, 2016, 07:13:26 PM »
I'm like rejetto, I have not managed to reproduce the popup, I have not found elsewhere which was scheduled the warning message

Offline pacmancat

  • Occasional poster
  • *
  • Posts: 1
    • View Profile
Re: New version: 2.3i
« Reply #8 on: June 22, 2016, 02:55:05 AM »
Quick note: I was having trouble with the update, and it turned out that the realtime filesystem protection in Microsoft Security Essentials (Win7 64) was detecting the 2.3i version as Trojan: Win32/Spallowz.A!cl and automatically deleting it after it downloaded...

I turned off realtime protection, downloaded the file from a few of the mirrors (melauto.it, kilobyte.cz, turekuba.cz) and scanned them in VirusTotal, and other than ESET's "a variant of Win32/Server-Web.HFS.A potentially unsafe" false positive they came up clean. I had to whitelist the executable in Microsoft Security Essentials to stop it from auto-deleting... anyone else getting this behavior?

Offline LeoNeeson

  • Tireless poster
  • ****
  • Posts: 498
  • Solitario...
    • View Profile
    • twitter.com/LeoNeeson
Re: New version: 2.3i
« Reply #9 on: June 22, 2016, 05:52:22 AM »
Quick note: I was having trouble with the update, and it turned out that the realtime filesystem protection in Microsoft Security Essentials (Win7 64) was detecting the 2.3i version as Trojan: Win32/Spallowz.A!cl and automatically deleting it after it downloaded...

I turned off realtime protection, downloaded the file from a few of the mirrors (melauto.it, kilobyte.cz, turekuba.cz) and scanned them in VirusTotal, and other than ESET's "a variant of Win32/Server-Web.HFS.A potentially unsafe" false positive they came up clean. I had to whitelist the executable in Microsoft Security Essentials to stop it from auto-deleting... anyone else getting this behavior?
This is being discussed here. If all the antivirus worked properly, this should not happen.
• HFS ahora también disponible en Español! (Clic aqui) :)
• HFS is now also available in Spanish! (Click here)

Offline funbsd

  • Occasional poster
  • *
  • Posts: 8
    • View Profile
Re: New version: 2.3i
« Reply #10 on: June 22, 2016, 06:25:55 AM »
Still not working with Chinese searching.

It's work well until #267.
It does not work well since #269.

I can not download #268 from:http://www.melauto.it/rejetto/beta/hfs268.exe.So I don't test it.
It's really weird. #268 is missing, and since then, Search with Chinese word does not work well.

Offline LeoNeeson

  • Tireless poster
  • ****
  • Posts: 498
  • Solitario...
    • View Profile
    • twitter.com/LeoNeeson
Re: New version: 2.3i
« Reply #11 on: June 23, 2016, 08:20:31 AM »
Still not working with Chinese searching.

It's work well until #267.
It does not work well since #269.

I can not download #268 from:http://www.melauto.it/rejetto/beta/hfs268.exe.So I don't test it.
It's really weird. #268 is missing, and since then, Search with Chinese word does not work well.
Besides the fact it's an old version, with known security risks, I don't know if Rejetto keeps the source code of those two versions, to find a possible 'regression'. Anyway, it's recommended to use of the last version, since old versions have multiple vulnerabilities.

I only have the versions starting HFS v2.3 #288.
• HFS ahora también disponible en Español! (Clic aqui) :)
• HFS is now also available in Spanish! (Click here)

Offline bmartino1

  • Tireless poster
  • ****
  • Posts: 789
  • I'm only trying to help i mean no offense.
    • View Profile
    • none - google translate
Re: New version: 2.3i
« Reply #12 on: June 25, 2016, 02:17:30 PM »
Besides the fact it's an old version, with known security risks, I don't know if Rejetto keeps the source code of those two versions, to find a possible 'regression'. Anyway, it's recommended to use of the last version, since old versions have multiple vulnerabilities.

I only have the versions starting HFS v2.3 #288.

if i recall corectly, I have a hard time tranvesing sourfogre with it goin to aut download stuff, you can go back to that build and pull the source code form the archve of the site...
https://sourceforge.net/projects/hfs/files/

it been a while, ir ecal geitng to and area and chagning the build nube to the one i was looking for...
(as ther are still downlads of soucre code and defatult tempaltes befre the use of jquery...)
I'm only trying to help i mean no offense.
thank you for your time and patience,
Bmartino1

Offline LeoNeeson

  • Tireless poster
  • ****
  • Posts: 498
  • Solitario...
    • View Profile
    • twitter.com/LeoNeeson
Re: New version: 2.3i
« Reply #13 on: June 26, 2016, 06:35:40 AM »
https://sourceforge.net/projects/hfs/files/
Sadly, this Build #268 is not hosted on SourceForge. There is a big 'gap' of builds missing there, between 2009 (v2.2f Build 155) and 2014 (v2.3 Build 288). I guess Build #268 was released approximately in August/September 2010. If we had the source code of #267, #268 & #269, we could try to find the changes, but they are unavailable to download.

I did a deep search, and I found that someone reported this, back in 2011 (here) and you reported this on 2014 (here), but since Rejetto doesn't have a chinese system to test this, it's hard for him to fix this issue.
• HFS ahora también disponible en Español! (Clic aqui) :)
• HFS is now also available in Spanish! (Click here)

Offline rejetto

  • Administrator
  • Tireless poster
  • *
  • Posts: 12903
    • View Profile
Re: New version: 2.3i
« Reply #14 on: June 29, 2016, 04:44:28 PM »
Still not working with Chinese searching. It's work well until #267. It does not work well since #269.

hi, i've found now your previous years-old posts where you report this information. Sorry for not replying before, i guess i just overlooked.
I too don't have #268. I can't remember, but i guess it was a build produced for testing purposes of a single user. Never mind.
I analyzed 267-269 differences, and i think i've found what has caused your problems, yet i'm not sure about the correct solution.
I will send you privately a test version and you'll tell me if it works for you.