Core 1.0.0 on installer when core 1.0.1 is released?

[Ron-e]

I have noticed that when i look at the newest installer that the Sentora core 1.0.0 is used but when i look at github it says that Sentora core 1.0.1 is released a while back.
Is this on purpose?

[TGates]

Me.B

[Me.B]

1.0.1 is 1.0.0 + FTP manual patch. We did that to avoid pushing the master that had more modifications and still need testing.

M B

[Ron-e]

So people who newly install Sentora with the current installer have to use the FTP HOT FIX or else they are vulnerable for the FTP exploit because the installer uses Sentora core 1.0.0 and not Sentora core 1.0.1 with the FTP User Delete Exploit fix?

[Me.B]

Any new install will get the sentora 1.0.0 then the install will patch it. ( so after the patch we are in 1.0.1 core).

So you are not vulnerable.

As I tried to explain the 1.0.1 branch doesn't reall exist may be I should create it.

This is the best choice I found to offer the patch quickly without making a full release that would offer a lot of bugs instead of a quick/clean fix.

If you have any other thougts/idea's let me know.

M B