Security leak (sep 10th 2014), where is patch?

[emel]

hi team

regarding this alarming post:
http://blog.sucuri.net/2014/09/security-advisory-virtuemart-for-joomla.html

is there an update (patch) available. or is your latest 26.10 enough to stop the leak?

i read 26.10C is the version to install, but can't figure out if that's on your download section.

thx

[jenkinhill]

Securi don't show the right version number. It's 2.6.10 from http://dev.virtuemart.net/projects/virtuemart/files that should be used.  Test all updates on a backup copy of the site first.

[manosthx]

Can you give as a patch for this fix ? Or can you give as the file that you have change ? it is difficult to update the virtuemart to 20 sites ASAP!

[jenkinhill]

The quick fix can now be shown, see http://virtuemart.net/news/latest-news/462-security-release-of-vm2-6-10-and-vm2-9-9b