Simple Machines is happy to release a new update to Simple Machines 1.0 and 1.1. This release addresses an input validation vulnerability of the X-Forwarded-For header. Also two small issues regarding search and polls have been addressed.
Note that the fix for the SMF 1.0.x branch will be released as new version 1.0.7, while the fix for the 1.1 RC2 branch will merely be released as patched version, the version of the forum will remain 1.1 RC2 (therefor, most of the modifications should remain compatible). It should be noted that we have provided one update package that patches versions 1.0.5, 1.0.6, and 1.1 RC2.
If you currently have installed 1.0.5, 1.0.6 or 1.1 RC2, you can do either of the following to upgrade:
* Use the package manager in your administration center - one click, and you're done.
* Download the update archive file from the download page, and upload all of the files from it.
* Download the modification file, attached to this message, and modify the files manually according to it.