Advertisement:

Author Topic: SMF 2.0.1 and 1.1.15 critical security patches released  (Read 2371953 times)

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,314
  • Blue Wolf
SMF 2.0.1 and 1.1.15 critical security patches released
« on: September 18, 2011, 06:24:43 PM »
Hello all,

Simple Machines Forum project has released SMF 1.1.15 and SMF 2.0.1 security patches for the SMF community.
Critical security issues have been identified and fixed with this patch, therefore it is highly recommended to make sure you update your forums immediately.

Please find the changelog as usual, on the downloads page: http://download.simplemachines.org/

Please do not use this topic for support requests. You will get a much quicker and better response by posting in the relevant support board!

Regards,

Simple Machines Forum project
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline Aaron

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,711
  • Gender: Male
    • Aaronweb.net
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #1 on: September 18, 2011, 06:25:48 PM »
Glad to see this one released. Congrats. :)

Offline -=[Vyorel]=-

  • Full Member
  • ***
  • Posts: 676
  • Gender: Male
  • SMF Wiki Writer
    • DSKVyorel on Facebook
    • xeromzone on LinkedIn
    • @XeromZoneCom on Twitter
    • Xerom Zone Community
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #2 on: September 18, 2011, 06:27:23 PM »
Wow. Congratulations SMF Team!
My mods for SMF - [5].

akyhne

  • Guest
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #3 on: September 18, 2011, 06:29:17 PM »
Werll done team

Offline catfished

  • Sr. Member
  • ****
  • Posts: 877
  • Gender: Male
  • pǝsnɟuoɔ ןןıʇs puɐ ʇɹıp uɐɥʇ ɹǝpןo
    • CatfishED.com
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #4 on: September 18, 2011, 06:30:33 PM »
Yeah, I already upgraded when I went into my admin cp earlier and found that 1.1.15 was ready with a one click upgrade so I upgraded both of my forums in seconds! Great work guys and gals. ;D
You use and like this forum software? Then show your appreciation and support by becoming a Charter Member.



CatfishEd.com

Offline Looking

  • SMF Hero
  • ******
  • Posts: 1,847
  • SMF Customization
    • SMF Custom Themes
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #5 on: September 18, 2011, 06:36:02 PM »
Thanks for the update but the 1.1.15 changelog is missing?

Offline Oldiesmann

  • Lead Developer
  • SMF Super Hero
  • *
  • Posts: 23,890
  • Gender: Male
  • Ask me about the function DB :)
    • oldiesmann on Facebook
    • http://www.linkedin.com/in/michaeleshom on LinkedIn
    • @oldiesmann on Twitter
    • Archie Comics Fan Forum
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #6 on: September 18, 2011, 07:11:24 PM »
Note to SMF 2.0 users...

If this isn't showing up in your admin center, you have a couple of options:
Download it from the Upgrades Site and install it through the package manager
Run the "Fetch Simple Machines Files" scheduled task as follows:
Admin -> Maintenance -> Scheduled Tasks
Check the box in the "Run Now" column next to "Fetch Simple Machines Files"
Click the "Run Now" button

Offline (F.L.A.M.E.R)

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,614
  • Gender: Male
  • I am a ninja!
    • adishpatel on Facebook
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #7 on: September 18, 2011, 07:15:46 PM »
Congratz Team :)
Need paid assistance for your forum? CLICK ME!
Email: flamer@simplemachines.org (Stop sending me love proposals! I don't do Internet dating :P)

Offline sonficyus

  • Semi-Newbie
  • *
  • Posts: 87
    • Soner.Top.01 on Facebook
    • @sonficyus on Twitter
    • Cevher Hazırlama
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #8 on: September 18, 2011, 08:37:29 PM »
Thanks a lot...

We are looking forward to SMF 2 which seo entegrated...

Offline rickmastfan67

  • Semi-Newbie
  • *
  • Posts: 96
  • Gender: Male
    • @rickmastfan67 on Twitter
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #9 on: September 18, 2011, 08:41:41 PM »
Thanks for the update but the 1.1.15 changelog is missing?

I'll second this.  Would like to see the changelog for 1.1.15.

That and what changes are made to the files and if any changes are made to the "theme" files so I can see if I need to do any manual changes for the custom themes that are run at a forum I admin.
« Last Edit: September 18, 2011, 09:19:09 PM by rickmastfan67 »

Offline vagrant

  • Semi-Newbie
  • *
  • Posts: 72
  • Gender: Male
    • Discount Le Creuset
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #10 on: September 18, 2011, 09:12:47 PM »
Thanks for all the hard work team to keep us safe.

Offline tragidy

  • Semi-Newbie
  • *
  • Posts: 57
  • Gender: Male
  • Open Source
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #11 on: September 18, 2011, 09:38:18 PM »
Thanks for the update, Would love to see the change log as this breaks a few things like portals and aeva...


Since the update I cannot even view server settings...
Session verification failed. Please try logging out and back in again, and then try again.
Open source Matters, the GNU GPL License is one of the most valuable text ever created by mankind.
Support all open source projects when possible as their concepts are paving the future. ~ tragidy

Offline MLM

  • Full Member
  • ***
  • Posts: 490
    • Visual Pulse
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #12 on: September 18, 2011, 09:44:02 PM »
How long does it take to get the notification in your admin control panel. I was editing my private board when I saw it and it installed just like a mod which is amaaaazzing compared to upgrades I have done before. For some reason my public forum does not have this notification thing yet. And the downloads section does not have the mod type upgrade with individual edits.
My Themes:
My Mods:
Unsolved Threads:
  • None atm...

Offline Oldiesmann

  • Lead Developer
  • SMF Super Hero
  • *
  • Posts: 23,890
  • Gender: Male
  • Ask me about the function DB :)
    • oldiesmann on Facebook
    • http://www.linkedin.com/in/michaeleshom on LinkedIn
    • @oldiesmann on Twitter
    • Archie Comics Fan Forum
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #13 on: September 18, 2011, 09:53:23 PM »
If it's on 2.0, see my post above...

Note to SMF 2.0 users...

If this isn't showing up in your admin center, you have a couple of options:
Download it from the Upgrades Site and install it through the package manager

Run the "Fetch Simple Machines Files" scheduled task as follows:
Admin -> Maintenance -> Scheduled Tasks
Check the box in the "Run Now" column next to "Fetch Simple Machines Files"
Click the "Run Now" button

Offline MLM

  • Full Member
  • ***
  • Posts: 490
    • Visual Pulse
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #14 on: September 18, 2011, 09:57:22 PM »
If it's on 2.0, see my post above...

Thanks :) - Did not notice.
My Themes:
My Mods:
Unsolved Threads:
  • None atm...

Offline ApplianceJunk

  • SMF Hero
  • ******
  • Posts: 3,332
    • ApplianceJunk.com
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #15 on: September 18, 2011, 10:54:18 PM »
2.0.1 installed... Thanks,

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,314
  • Blue Wolf
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #16 on: September 18, 2011, 11:09:36 PM »
live627, tragidy,

There was a problem with the 2.0.1 patch that I fixed, and updated it just about half an hour ago. It should all work normally now.

I don't know where did the changelog disappear. :) Will look into it.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline Account Abandoned

  • Full Member
  • ***
  • Posts: 513
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #17 on: September 18, 2011, 11:13:24 PM »
Updating #10 of #11 forums powered by SMF :) Thanks folks for the update!!

Offline ForumGuy789

  • Jr. Member
  • **
  • Posts: 110
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #18 on: September 19, 2011, 12:15:20 AM »
Thanks for this! But one quick question. This Update info is showing up in the Admin center at just one of my two forums. Any reason it's not showing up in the other forum?

Is there some setting that's not right?

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,314
  • Blue Wolf
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #19 on: September 19, 2011, 12:16:47 AM »
ForumGuy,
You may need to run the scheduled task to fetch Simple Machines files. Probably on the other forums, it didn't get to run yet (by default it's set at once per 24 hours if I remember correctly.)
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github