DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=simple/simple; d=list.communigate.ru; s=mail; bh=O4GShtVJc8awlftWXrHN48UikYQWqS6Z46XfYdVpTNw=; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Date:To: Subject:From; b=lVnwlRY3P5O1tVQ/6iJVm1ikXLo5dl3ucZK22D5GakCYxHV8V/zYH2S15sfWz XzoP9yVdZbREkryQMXq7egaZpG824MfQI29oAxE3cCMP0n5mAfWQ4D8xhLZsepqYjiiu7xbQmcFCe 9D4sfLOdsNQcXtnTg/VMW1qSoTRl7aHiY= From: "Mailing List Admin" Received: from [89.22.52.75] (account listmaster@list.communigate.ru) by list.communigate.ru (CommuniGate Pro WEBUSER 6.3.13) with HTTP id 60891082; Mon, 27 Jun 2022 13:45:15 +0300 Subject: [!] 6.3.13 - English To: CGPUpdate@list.communigate.ru X-Mailer: CommuniGate Pro WebUser v6.3.13 Date: Mon, 27 Jun 2022 13:45:15 +0300 Message-ID: MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8; format="flowed" Content-Transfer-Encoding: 8bit Hello. We strongly recommend to upgrade your CommuniGate Pro instance to the version 6.3.13, as the fixes, implemented in this version, close the vulnerability that existed since version 6.3 and improve the security of the CommuniGate Pro functions related to the use of external helper programs. If for any reason you can not upgrade to version 6.3.13 urgently, we recommend to remove or disable the qrlogin.wcgp script in the Basic skin. You can do that by removing that file from the WebSkins directory of CGPro Application directory and restarting the server or by uploading an empty file with that name to the server-wide Basic skin through the WebAdmin interface. We consider security issues very seriously and will continue to tighten our products robustness.