Simple Machines announces the release of SMF 1.1.10 and 2.0 RC1.2, addressing a few vulnerabilities found in SMF 1.1.9 and 2.0 RC1-1. Also for those still using the SMF 1.0.x branch, an upgrade to 1.0.18 was released. We strongly recommend that all users upgrade as soon as possible.
Please note that SMF 2.0 RC1.2 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. RC2 is not quite ready yet, and the new Curve theme is still scheduled for SMF 2.0 RC2, as announced earlier. For more information read the latest developers blog entry
about progress towards RC2's release.Users running 2.0 RC1 will need to upgrade to 2.0 RC1-1 BEFORE upgrading to 2.0 RC1.2.
Upgrade automatically by visiting your administration center, where a notice will be displayed prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Additionally, you can upgrade using the package manager by downloading the attached patch, uploading it to the package manager, and applying it as prompted. For help with this refer to the Package Manager
section of the Online Manual
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual
. If you experience a session verification error when inputting FTP details for updating process, please see this
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page
for all versions.Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!