SMF 1.1.9 and 2.0 RC1-1 released

[Crime]

thanks a lot smf team. we are upgrading

[Aleksi "Lex" Kilpinen]

Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?

Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?



I also have a little problem  the upgrade link is not showing in the admin panel?

Run all the maintanance options, and it should pop up

[haktanir2]

Thank you, installed with no problems.

[Joe N]

Please

I installed it. Got this error

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php

[SleePy]

Only one downside - attached images cant have the same filename anymore

Not true. All attachments use a unique hash and id. So you do not have to worry about that.

Joe N and everyone else,
Please use our support forums

[青山 素子]

Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?

The core security issue also existed in our 2.0 code. I don't personally know of any compromised sites that were running that edition, but it's best to be safe.

Also, the announcement doesn't say so, but I believe we also released a patch for the legacy 1.0 series as well.




I also have a little problem  the upgrade link is not showing in the admin panel?


[/quote]

[cuacosa]

Joe N   -   I´ve the same error, please SOS..SOS..

I installed it. Got this error

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php

[Joe N]

I had exalcly the same thing. Upload it to your ftp

[blondeamon]

Fast and perfect updating...i SMF!!

Keep up the good work against those security glitches!

[tamasir]

Thank you guys for all you do
tamasir~

[cuacosa]

Joe N   -


Uploaded by FTP to my directory packages & try to instal &   I´ve the same error, please SOS..SOS..

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php

[fals]

Only one downside - attached images cant have the same filename anymore

Not true. All attachments use a unique hash and id. So you do not have to worry about that.

Well, its true - on my forum after todays update.
I have testet, uploaded a file called avatars-popup.jpg, then made a reply and try upload same file again:

An Error Has Occurred!                         Sorry! There is already an attachment with the same filename as the one you tried to upload. Please rename the file and try again.

The uploaded file itself does have a hashed filename (when i tjek via FTP), but i still get the above error.


Should i start a new tread on my problem or does anyone else experience the same ?

[Aleksi "Lex" Kilpinen]

Should i start a new tread on my problem or does anyone else experience the same ?

You should definitely start a new topic on this - I just tried on 1.1.9 and I can upload as many test.gif's I want.

[qtime]

thanks, safety is most important!!!

[Marcus Forsberg]

Joe N and cuacosa, please use our supportboards.

[Pяηѕѕ LF]

Hello,

Can I delete the old update packages on my packages list simply to click to "delete" ?

If I delete the old update, can I have any problems ?

Could you tell me more about this please. Thanks.

11.     SMF 1.0.16 / 1.1.8 Update       
33.     SMF 1.0.15 / 1.1.7 Update         
47.     SMF 1.0.12 / 1.1.4 / 2.0 b1.1 Update 
48.     SMF 1.0.14 / 1.1.6 Update         
57.     SMF 1.0.13 / 1.1.5 / 2.0 b3.1 Update     

[Magicjax]

When I click the link in my Admin panel that it tells me to click to upgrade. I get a 404 error page.

Here's the link location it takes me to.

http://magictalk.com/forum/index.php?action=pgdownload;auto;package=http://custom.simplemachines.org/mods/downloads/smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip;sesc=7e63e22aac9a461991c87594d9d5917c

What causes this and what should I do?

Thanks

[tooman]

nice

thx

[NukeGaming]

great work developers and congratulations.

I already update my forum to 1.1.9


CHEERS   

[kkattfish]

thank you very much!  worked with no glitches for me from 1.1.8 to 1.1.9