Advertisement:

Author Topic: SMF 2.0.1 and 1.1.15 critical security patches released  (Read 2393492 times)

Offline a10

  • Charter Member
  • Full Member
  • *
  • Posts: 490
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #40 on: September 19, 2011, 12:32:49 PM »
Thanks, feeling safe is feeling good!

From 1.1.14 it triggered a "corrupt or not compatible", got the idea to uninstall Version Emulation mod, and all went well.
2.0.8, mods: Remove Started By, Contact Page, Like Posts, Reattribute Posts
"Don't find fault, find a remedy; anybody can complain" (Ford?)

Offline Oldiesmann

  • Lead Developer
  • SMF Super Hero
  • *
  • Posts: 24,259
  • Gender: Male
  • Ask me about the function DB :)
    • oldiesmann on Facebook
    • Oldiesmann on GitHub
    • http://www.linkedin.com/in/michaeleshom on LinkedIn
    • @oldiesmann on Twitter
    • Archie Comics Fan Forum
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #41 on: September 19, 2011, 12:39:50 PM »
i told you i dont wanna do the upgrade via the package manager but by uploading the files normally

Upgrading through the package manager is the only way you can do it without losing existing mods.

Offline Ventic

  • Full Member
  • ***
  • Posts: 635
  • Gender: Male
    • vasilis.koukoutis on Facebook
    • @joyspotorg on Twitter
    • JoySpot
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #42 on: September 19, 2011, 12:42:45 PM »
i told you i dont wanna do the upgrade via the package manager but by uploading the files normally

Upgrading through the package manager is the only way you can do it without losing existing mods.
otherwise i will lose my manual packages?
i am talking about the packages i installed manually not the other that i installed via package manager

Offline Cal O'Shaw

  • Full Member
  • ***
  • Posts: 444
  • SMF 1.1.14 & 2.0 Sites
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #43 on: September 19, 2011, 12:45:16 PM »
May I have the changelog of 1.1.15 ?

try looking? The 1.1.15 changelog is in the list
http://download.simplemachines.org/index.php?thanks;filename=smf_1-1-15_changelog.txt


Hoping that wasn't sarcasm, as I went to the page as stated in the initial post and it wasn't there.  A link to the 2.0.1 changelog was visible, the 1.1.15 was not.  A few others mentioned it as well, so it wasn't just me "not looking".

Thank you for the specific URL.  I admit to being unfamiliar with all the pages and layout here, as I tend to visit that area only when notified of an update.

Regards,

Cal

Offline Ventic

  • Full Member
  • ***
  • Posts: 635
  • Gender: Male
    • vasilis.koukoutis on Facebook
    • @joyspotorg on Twitter
    • JoySpot
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #44 on: September 19, 2011, 12:46:48 PM »
well i got an idea,since when i was trying to upgrade via the package i saw that i can see the changes that have been made.so i cant change those 5-6 files manually too?
it will work or not
« Last Edit: September 19, 2011, 12:52:17 PM by Ventic »

Online Kindred

  • The Mean One
  • Project Manager
  • SMF Master
  • *
  • Posts: 42,181
  • Gender: Male
    • wagner999 on Facebook
    • Kindred-999 on GitHub
    • www.linkedin.com/in/wdwagner/ on LinkedIn
    • @Kindred_999 on Twitter
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #45 on: September 19, 2011, 12:53:43 PM »
Ventic,

You can either use the upgrade archive file and lose all your mods or use the package manager update and keep all your mods.  Your choice.

If you want to manually apply the updates, then download the package manager update, extract the XML and read through that for instructions on what files and code to manually update.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support forums.  Thank you.

Offline squad

  • Charter Member
  • Jr. Member
  • *
  • Posts: 249
  • Gender: Female
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #46 on: September 19, 2011, 02:44:41 PM »

I'm a litle tired at the moment, and will revisit this later today.....

I do have a problem, that may have been covered in this post I may
have missed, but when I try & upgrade from 1.1.14 to 1.1.15 I get the
following.....

'The package you are trying to download or install is either corrupt or not compatible with this version of SMF.'

Please don't yell at me if this has been covered.....I sadly almost single handly
run my forum, without mush assistance from my mods & members....

Offline Illori

  • Doc Coordinator
  • SMF Master
  • *
  • Posts: 37,066
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #47 on: September 19, 2011, 02:46:28 PM »
please start a thread in the proper support board, this thread is not for support.

Offline squad

  • Charter Member
  • Jr. Member
  • *
  • Posts: 249
  • Gender: Female
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #48 on: September 19, 2011, 02:59:28 PM »
Sorry :(

Offline klra

  • Jr. Member
  • **
  • Posts: 349
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #49 on: September 19, 2011, 03:06:30 PM »
Installed without issues on 3 forums, 1.1.14   ->   1.1.15

 :D

Offline Account Abandoned

  • Full Member
  • ***
  • Posts: 512
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #50 on: September 19, 2011, 03:30:57 PM »
i told you i dont wanna do the upgrade via the package manager but by uploading the files normally

Upgrading through the package manager is the only way you can do it without losing existing mods.

Well I wish I would of done this instead lol, what I get for nor asking or looking lol. I have to emulate all 11 of my forums to get the modifications to work correctly, lol. Nice to see there is an easier way...for the next time :D

Offline Ventic

  • Full Member
  • ***
  • Posts: 635
  • Gender: Male
    • vasilis.koukoutis on Facebook
    • @joyspotorg on Twitter
    • JoySpot
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #51 on: September 19, 2011, 04:05:25 PM »
i told you i dont wanna do the upgrade via the package manager but by uploading the files normally

Upgrading through the package manager is the only way you can do it without losing existing mods.

Well I wish I would of done this instead lol, what I get for nor asking or looking lol. I have to emulate all 11 of my forums to get the modifications to work correctly, lol. Nice to see there is an easier way...for the next time :D
i know dude :D

Offline ormuz

  • Full Member
  • ***
  • Posts: 649
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #52 on: September 19, 2011, 04:51:27 PM »
Update to new version 1.1.15 and users start to report strange images appearing in my forum... Anyone else?

http://i55.tinypic.com/65pft0.png
http://postimage.org/image/2ll1mrp7o/

Any ideas?

Offline Illori

  • Doc Coordinator
  • SMF Master
  • *
  • Posts: 37,066
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #53 on: September 19, 2011, 04:52:43 PM »
please start a thread in the proper support board, this thread is not for support.

Offline Storman™

  • Support Specialist
  • SMF Hero
  • *
  • Posts: 2,027
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #54 on: September 19, 2011, 05:51:14 PM »
Quote
But comparing Subs-Menu.php of version 2.0 and 2.0.1 does not show any differences except the @version-Line.

Was the bug already fixed in 2.0 or have you missed to replace the files correctly?

They are identical except for the version line.

Any update on this ?

Basically trying to ensure that Subs-Menu.php is the correct file in 2.0.1 and not one that's been accidently omited from the package ?
Any Backup method is bettter than no Backup method....

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #55 on: September 19, 2011, 06:30:32 PM »
Quote
But comparing Subs-Menu.php of version 2.0 and 2.0.1 does not show any differences except the @version-Line.

Was the bug already fixed in 2.0 or have you missed to replace the files correctly?

They are identical except for the version line.

Any update on this ?

Basically trying to ensure that Subs-Menu.php is the correct file in 2.0.1 and not one that's been accidently omited from the package ?

They are the correct files. It shouldn't have had only a version change, but this was due to a mistake made in the process, and since forums were already receiving the versioning (as you can see in the admin panel, detailed versioning link), I didn't change that. Sorry about that.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline cebu

  • Semi-Newbie
  • *
  • Posts: 44
  • Gender: Male
  • 1 Bar Boost
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #56 on: September 19, 2011, 07:04:40 PM »
i did a manual edit. everything looks fine.  its great.

Offline aw06

  • SMF Hero
  • ******
  • Posts: 2,763
  • Gender: Male
  • Make The Link
    • shopinja.classifieds on Facebook
    • @shopinja on Twitter
    • ShopinJA.com
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #57 on: September 19, 2011, 08:16:37 PM »
I'm using English utf8 .. will i have to update index.english-utf8.php manually ?
:: ShopinJA.com Powered by SMF 1.1.19 | Ig-Oh Theme by Koni | 70 Rock Solid Error Free Mods | Many Custom Edits & Tweaks ::
- Host Unlimited Websites - Free Website Builder & Templates - Unlimited Disk Space & Bandwidth

Offline mashby

  • Support Specialist
  • SMF Hero
  • *
  • Posts: 8,380
  • Gender: Male
  • badass beer hound
    • Choppix
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #58 on: September 19, 2011, 08:49:08 PM »
I'm using English utf8 .. will i have to update index.english-utf8.php manually ?
Probably. Shouldn't too intensive though. :) Two edits only (see last two operations)
Always be a little kinder than necessary.
- James M. Barrie

Offline hcfwesker

  • SMF Hero
  • ******
  • Posts: 2,187
  • Gender: Male
  • SMF 2.0.4
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #59 on: September 19, 2011, 09:55:34 PM »
Thank goodness it's just a patch, not a full upgrade.   Great work SMF team!