WordPress.org

Forums

Jetpack by WordPress.com
Important Jetpack security update (20 posts)

  1. Richard Archambault
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    We released an important update to Jetpack today. Please update any sites using Jetpack to the latest version immediately. You can see the announcement here, a FAQ about the update here, and help on installing the update here.

    https://wordpress.org/plugins/jetpack/

  2. jeffqc
    Member
    Posted 1 year ago #

    what are the symptome? because 3 of my site are now blank page :(

  3. Richard Archambault
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    Jeff, what are your sites? You can contact us via http://jetpack.me/contact-support/ if you want and I'll take care of your concerns right away.

    To answer your question though, there are no "symptoms" per se. As per our announcement post:

    During an internal security audit, we found a bug that allows an attacker to bypass a site’s access controls and publish posts. This vulnerability could be combined with other attacks to escalate access

    So, contact us and give me your URLs and I'll take a look.

  4. shefi
    Member
    Posted 1 year ago #

    Just installed latest version of Jetpack. I assume it's the latest version because I installed it moments ago. But when I click on "settings" or "edit" I get this error message. I cannot even deactivate it, or navigate anywhere within the WP site. I had to (once again) remove the plugin via cPanel.

    "Warning: require_once(/home/sheffner/public_html/blogs/reading/wp-content/plugins/jetpack-lite/class.jetpack-network.php) [function.require-once]: failed to open stream: No such file or directory in /home/sheffner/public_html/blogs/reading/wp-content/plugins/jetpack/jetpack.php on line 38

    Fatal error: require_once() [function.require]: Failed opening required '/home/sheffner/public_html/blogs/reading/wp-content/plugins/jetpack-lite/class.jetpack-network.php' (include_path='.:/usr/local/php53/pear') in /home/sheffner/public_html/blogs/reading/wp-content/plugins/jetpack/jetpack.php on line 38"

  5. Richard Archambault
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    Hi shefi, can you try the "Installing via FTP" instructions? Also, it looks like you are using the "Jetpack Lite" plugin, which seems to be causing a conflict. I'd suggest deactivating that plugin if you intend to use Jetpack, to avoid this kind of conflict.

    http://jetpack.me/support/how-to-install-the-security-update/#ftpupdate

  6. joshzam
    Member
    Posted 1 year ago #

    I've got Version 2.9.2 of Jetpack installed and I'd happily update to the latest version, but my dashboard does not indicate that an update is available. This makes me concerned. Is there any way to confirm a) why this is happening, and b) if a manual upgrade's files are verified as authentic?

  7. Eclectablog
    Member
    Posted 1 year ago #

    Have site stats been eliminated from Jetpack?

    I updated to WP 3.9 this morning and now my Jetpack site stats have disappeared. No access to it in the dashboard, no indicator at the top of the blog page, and when I go to my bookmarked link I get the message "You do not have sufficient permissions to access this page." It's not even listed when I click the Jetpack tab.

    I am the owner of the site with "Administrator" privileges. Running Jetpack 2.9.3.

  8. concierge1
    Member
    Posted 1 year ago #

    since I updated the most recent version, NONE of the "publicize" connections(to google+/twitter/etc...) can be access or connected to.
    everytime, it says:

    The webpage cannot be found
    HTTP 404
    Most likely causes:
    •There might be a typing error in the address.
    •If you clicked on a link, it may be out of date.
    What you can try:
    Retype the address.
    Go back to the previous page.
    Go to and look for the information you want.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    PLEASE ADVISE! It is silly that we have to re-post manually to each site. the share buttons connections work just fine-why not the publicize buttons??
    many thanks for your attention & assistance,
    jo-anna
    http://www.conciergejo-anna.com

  9. Richard Archambault
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    joshzam: Did you update to 2.9.3 finally?

    Eclectablog: Do you still have this issue? If so, could you post your site URL here, so I can have a look?

    If you want it to remain private, you can also contact us via this contact form:
    http://jetpack.me/contact-support/

    If you contact us through our form, please make sure to include a link to this thread in your message.

    concierge1: Can you try disocnnecting and reconnecting Jetpack to WordPress.com please? Your URL changed (it used to be http://conciergejo-anna.com/concierge/ ) which is why you have this problem. I have fixed it on our end, but you need to disconnect and reconnect to WordPress.com. For my reference, your blog ID is 61001865 on our end, just in case something goes wrong. Try that and let me know once you've done that.

  10. Eclectablog
    Member
    Posted 1 year ago #

    My problem was resolved when the Subscribe2 plugin was updated. That was the cause of the issue.

  11. joshzam
    Member
    Posted 1 year ago #

    The WordPress IP was being blocked by my host and so neither Jetpack nor any of my other plugins nor the WP core install were updating. While troubleshooting the issue I removed the Jetpack plugin, realizing that I really didn't need it (it was just for narcissistic stats following purposes). Thank you for finally getting back in touch.

  12. concierge1
    Member
    Posted 1 year ago #

    dear richard,
    yes, that was the problem, & thank you, for i would never have thought to go back to wordpress.com, when my blog was there.i switched to wordpress.org months ago!
    all is well & updated & publicize is working-woo-hoo!
    thanks again,
    jo-anna

  13. miketoons
    Member
    Posted 1 year ago #

    I cannot update to the latest version. Trying to update via Dashboard / Plugins fails for the following reason:

    Download failed. SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

    I downloaded the zip file to my computer and tried uploading from there but that failed too because the file was "too big".

    Any answers, please?

  14. Richard Archambault
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    Hi miketoons,

    Please try installing via FTP:

    http://jetpack.me/support/how-to-install-the-security-update/#ftpupdate

    If you still have trouble, please start a new thread, or contact us via our support site: http://jetpack.me/contact-support/

  15. miketoons
    Member
    Posted 1 year ago #

    Thanks for your help, Richard.
    FTP worked (scary region for a non-technical artist)

  16. Richard Archambault
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    Glad you got it sorted! I can understand that it *can* be scary if you're not used to it, but it's definitely a good tool to have at your disposal!

  17. srka
    Member
    Posted 1 year ago #

    I have problem with unzip in /plugins/ folder, it says;

    Archive: /home/wwwipor/public_html/wp-content/plugins/jetpack.3.0.1.zip
    End-of-central-directory signature not found. Either this file is not
    a zipfile, or it constitutes one disk of a multi-part archive. In the
    latter case the central directory and zipfile comment will be found on
    the last disk(s) of this archive.
    unzip: cannot find zipfile directory in one of /home/wwwipor/public_html/wp-content/plugins/jetpack.3.0.1.zip or
    /home/wwwipor/public_html/wp-content/plugins/jetpack.3.0.1.zip.zip, and cannot find /home/wwwipor/public_html/wp-content/plugins/jetpack.3.0.1.zip.ZIP, period.

    Extracting Archive
    Archive: /home/wwwipor/public_html/wp-content/plugins/jetpack.3.0.1.zip
    Extraction Location: /public_html/wp-content/plugins

  18. iamjadiam
    Member
    Posted 1 year ago #

    I'm getting this at the top of my site:
    Warning: Invalid argument supplied for foreach() in /home/content/37/11510637/html/wp-content/plugins/jetpack/modules/publicize/enhanced-open-graph.php on line 49

    What the what? No idea what to do here, so please help!

    Many thanks.

  19. sarpan
    Member
    Posted 1 year ago #

    Hi,

    I have wordpress version 3.9.1 and i am using jetpack version 3.0.1 i am unable to see my site stats from many days.When i am going to view my sitestats it goes on loading and loading even i am not using subscribe2 plugin.

    kindly help me out immediately

    Thanks

  20. Brandon Kraft
    Happiness Engineer
    Plugin Author

    Posted 1 year ago #

    @iamjadiam and @sarpan:
    Could you please start your own thread, as per the Forum Welcome?

    http://wordpress.org/support/plugin/jetpack#postform

    Thank you!

Topic Closed

This topic has been closed to new replies.

About this Plugin

  • Jetpack by WordPress.com
  • Frequently Asked Questions
  • Support Threads
  • Reviews

About this Topic

Tags

No tags yet.