Question Joomla / Kunena upgrade

I made an attempt to upgrade the forum to v.6 and Joomla 4... But I had to roll it back. I have two questions.

1. How do I correctly assign the open_basedir path for kunena? -

Warning: file_exists(): open_basedir restriction in effect. File(/var/www/mstp/libraries/kunena/External/composer/../../../../../src/libraries/kunena/Administrator/Extension/ForumComponent.php) is not within the allowed path(s): (*******************************) in /var/www/mstp/libraries/vendor/composer/ClassLoader.php on line 507

2. My forum has a large number of announcements, including new ones. Immediately after the upgrade, I got an announcement on the main page that was published four years ago. How can I fix it? 

P.S. What's going on with the forum, guys? I don't think it's safe. I can't say any more than that...

 

Smirnov wrote:

2. My forum has a large number of announcements, including new ones. Immediately after the upgrade, I got an announcement on the main page that was published four years ago. How can I fix it? 


 

Hello,

For that there is a fix for the 6.0.8 developpement version : github.com/Kunena/Kunena-Forum/commit/82...40066666f549ae28182a

Smirnov wrote:

P.S. What's going on with the forum, guys? I don't think it's safe. I can't say any more than that...

 

I need to investigate
 

xillibit wrote:

For that there is a fix for the 6.0.8 developpement version : github.com/Kunena/Kunena-Forum/commit/82...40066666f549ae28182a

 

Hello.
Thanks, xillibit. But what about open_basedir?
For Joomla it's something like:

/var/www/site_dir:/var/lib/php/session:/var/www/site_dir/tmp:/var/www/site_dir/log

But this is the first time I see that kunena requires its own special path for open_basedir.

xillibit wrote:

I need to investigate

 

This could pose a real security risk to the forum. Heck, there's no PM here and I can't tell you more... However, you don't need my advice.

Hello
maybe you can try this if you can get to your php.ini
stackoverflow.com/questions/51260925/how...low-url-fopen-in-php

Smirnov wrote:

xillibit wrote:

I need to investigate


 

This could pose a real security risk to the forum. Heck, there's no PM here and I can't tell you more... However, you don't need my advice.
 

I have found a fix for it yesterday, it's in place here

For that there is a fix for the 6.0.8 developpement version :  github.com/Kunena/Kunena-Forum/commit/82...40066666f549ae28182a  

Hmm. This is a critical error. Which should not be in the stable version of the forum... imho. I do not understand how the forum is supposed to work in production, if there is such an unpleasant problem.

How soon is the release of Kunena v.6.0.8 planned?

The release of Kunena 6.0.8 will be done during january