As a Twiki security bug will be announced shortly, I'm preparing an
update of our Twiki instance (wiki.osafoundation.org).  This update will
be expidited and pretty much dropped into place sometime by the end of
this week.

The migration process involves a new script which moves our local data
from the current instance onto a fresh snapshot instance of twiki.  I've
tested this a number of times tonight and swapped in the new instance
with a symlink and it works pretty well.  The only obvious issue is with
the contributors plugin (which is odd, since that plugin is now
distributed upstream).

The production wiki site has not changed; the existing site is still in
place and there should be no behavior changes.  This email is a warning
that a change is coming soon.  A notice will go out before a final
switchover.

Since we'll be using a recent twiki snapshot, there will be tons of
plugins available and interesting stuff available.  (Which is why I'm
going this route insteda of just patching the specific bug.)  And since
I'll finally have touched our twiki instance, I'll feel comfortable
enough to start tweaking the backend more.  On the shortlist are a
bugzilla plugin and a wysiwyg editor.  Suggestions welcomed.

If time permits, I will migrate from CGI to mod_perl as well (for a
5-10x performance increase), but the priority is to mitigate the
security issue.

-- 
Jared Rhine <[EMAIL PROTECTED]>

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Open Source Applications Foundation "Dev" mailing list
http://lists.osafoundation.org/mailman/listinfo/dev

Reply via email to