Advertisement:

Author Topic: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5  (Read 1077408 times)

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Greetings,

Simple Machines announces the immediate public release of SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 RC5.

This version is a security release, and it is strongly advised that all users upgrade to this release as it contains a few security and privacy fixes in both SMF 2.0 and SMF 1.1.

At this time, legal matters related to the upcoming license changes have prevented us from making a final release of SMF 2.0. While 2.0 RC4 has proved to be relatively stable, there have been several issues found and fixed since its release. Therfore, it has been deemed prudent to make another release candidate available for testing.

The 2.0 RC5 fixes are beneficial and recommended. However as the upgrade process is a hassle for some administrators a security-only patch for RC4 is also being made available. This patch only contains the security fixes, for admins who wish to secure their RC4 forum but may not want to do a complete upgrade. It is a simple package that can be installed quickly via the SMF package manager and should not break any existing RC4 themes and mods.
Please find this patch here: SMF 2.0 RC4 Security Patch.

We believe 2.0 RC5 to be free of significant problems. It should be given the same treatment as any other Release Candidate, and will be subjected to continued testing.

Main points of this 2.0 release include:
Several security-related fixes.
Mail management fixed.
Issues with international forums characters.
Unread replies and topics core functionalities issues were fixed.
A few administration features issues were fixed.
New integration hooks features introduced in RC4 were fixed.
Many other fixes and improvements.

The changelog is available on the usual downloads page: http://download.simplemachines.org/

Please do not use this topic for support requests. You will get a much quicker and better response by posting in the relevant support board.

Regards,

Simple Machines
« Last Edit: February 14, 2011, 12:43:12 PM by Norv »
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline Looking

  • SMF Hero
  • ******
  • Posts: 2,008
  • SMF Customization
    • SMF Custom Themes
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #1 on: February 11, 2011, 03:19:12 PM »
Thanks for fixing those.

What legal issues with 2.0? Will SMF still be free?

Offline qtime

  • Full Member
  • ***
  • Posts: 501
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #2 on: February 11, 2011, 03:23:32 PM »
Thanks, like to see the changes

Offline CountryLady

  • Jr. Member
  • **
  • Posts: 177
  • Gender: Female
    • OurCountryHaven
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #3 on: February 11, 2011, 03:23:47 PM »
Thanks for this, especially the explanation regarding the delay in SMF 2 going Gold.

Communication is a wonderful thing. :)

Again Thank You, ALL~!

Offline Akyhne

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 7,327
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #4 on: February 11, 2011, 03:25:31 PM »
Well done team.

Offline Antes

  • Evil Black Cat
  • Marketing
  • SMF Hero
  • *
  • Posts: 7,679
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @antesistan on Twitter
    • MMOBrowser
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #5 on: February 11, 2011, 03:25:41 PM »
Nice to see RC5 :)
- Solutions for everyone, It's that simple.

[ ezPortal 3.1 ] # [ Donate ] # Responsive Kitteh

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #6 on: February 11, 2011, 03:26:26 PM »
Looking,
SMF will always be free.

Please take a look at:
Simple Machines forms as an NPO

:)
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline Owdy

  • SMF Fossil
  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 15,568
  • Gender: Male
  • W00t!
    • janoloferiksson on LinkedIn
    • @@jaoler on Twitter
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #7 on: February 11, 2011, 03:34:59 PM »
Good job guys. Thanks for this.
Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0


Offline sonficyus

  • Semi-Newbie
  • *
  • Posts: 87
    • Soner.Top.01 on Facebook
    • @sonficyus on Twitter
    • Cevher Hazırlama
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #9 on: February 11, 2011, 03:54:19 PM »
Thank you for everything.

Too beatiful.
« Last Edit: February 11, 2011, 04:18:41 PM by sonficyus »

Offline Innbound

  • Newbie
  • *
  • Posts: 6
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #10 on: February 11, 2011, 03:55:03 PM »
Quote
An Error Has Occurred!
The package you are trying to download or install is either corrupt or not compatible with this version of SMF.

  Attempted to upgrade from within the Administration Center in v 1.1.12 (a fairly vanilla install might I add).

Offline JBlaze

  • Lead Customizer
  • SMF Super Hero
  • *
  • Posts: 12,114
    • zilladotexe on GitHub
    • jasonclemons1 on LinkedIn
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #11 on: February 11, 2011, 03:57:07 PM »
This topic is not to be used for support. Please post in your appropriate boards.

Offline sharks

  • Sr. Member
  • ****
  • Posts: 891
  • Gender: Male
  • There's always a way.
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #12 on: February 11, 2011, 03:58:40 PM »
I just saw this update when visiting the admin panel in my forum and when i checked here, no announcement had yet been made. :)

I don't understand why a change in licence is preventing the release of 2.0 final. Shouldn't a change in licence be able to be made quickly and easily if properly planned in advance? 5 years and 2.0 final is still baking... Honestly, i think it's just a clever way for the developers to say that the final version is not yet ready! Packing my non-existent admin hopes until 2012! LOL

But i greatly appreciate the efforts put into the fixes. I will definitely upgrade to 1.1.13 but i don't know if a 2.0 RC6 might be out later on, given the very unusual trend on SMF, so i'll just stick to my RC4 to avoid unnecessary work in re-installing all my modifications, manual edits and themes. With such a huge amount of time (as my brother made 2 kids in that same development time. LOL) i can only hope (for the sake of this software's reputation!) that when 2.0 gold is finally out, it won't be too buggy, if at all.
« Last Edit: February 11, 2011, 04:01:57 PM by sharks »
SMF 2.0 Theme Color Editor
http://www.colorizeit.com/browse/24/smf-20-themes.html

SMF Package Parser to view all edits made by any modification package:
http://resourcez.biz/PackageParser/

Firefox is the best browser for SMF!
http://www.mozilla.com/en-US/firefox/fx/

Offline wwwserfer

  • Semi-Newbie
  • *
  • Posts: 31
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #13 on: February 11, 2011, 04:04:25 PM »
Thank you for your work! :) *Thumbs up*

Offline Innbound

  • Newbie
  • *
  • Posts: 6
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #14 on: February 11, 2011, 04:06:25 PM »
This topic is not to be used for support. Please post in your appropriate boards.
Not asking for support nor am I expecting it. I've been using SMF since 2005 and I've posted 5 times, total. Do you still feel like upping you count to more over 10,000 posts by stating the obvious? 

Offline sharks

  • Sr. Member
  • ****
  • Posts: 891
  • Gender: Male
  • There's always a way.
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #15 on: February 11, 2011, 04:08:50 PM »
This topic is not to be used for support. Please post in your appropriate boards.
Not asking for support nor am I expecting it. I've been using SMF since 2005 and I've posted 5 times, total. Do you still feel like upping you count to more over 10,000 posts by stating the obvious? 
LOL. I think JBlaze might have misread your post. Or maybe not. :D
SMF 2.0 Theme Color Editor
http://www.colorizeit.com/browse/24/smf-20-themes.html

SMF Package Parser to view all edits made by any modification package:
http://resourcez.biz/PackageParser/

Firefox is the best browser for SMF!
http://www.mozilla.com/en-US/firefox/fx/

Offline enik

  • SMF Hero
  • ******
  • Posts: 1,429
  • Gender: Male
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #16 on: February 11, 2011, 04:09:59 PM »
Nice work thanks dev's  ;)

Offline JBlaze

  • Lead Customizer
  • SMF Super Hero
  • *
  • Posts: 12,114
    • zilladotexe on GitHub
    • jasonclemons1 on LinkedIn
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #17 on: February 11, 2011, 04:12:58 PM »
@Innbound, I was replying to sonficyus's post, not yours, and it's also a general reminder that no support will be given in this topic.

Offline Yağız...

  • SMF Super Hero
  • *******
  • Posts: 10,811
  • Gender: Male
    • MMO Browser
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #18 on: February 11, 2011, 04:14:07 PM »
I think someone forget the update package for SMF 1.1.13 :P

Offline NanoSector

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,290
  • Gender: Male
    • rick2288 on Facebook
    • Yoshi2889 on GitHub
    • Test Server
Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
« Reply #19 on: February 11, 2011, 04:16:01 PM »
So umm where do I find the security patch?

Do not feel like taking the hassle of upgrading after almost killing Firefox and QuickTime...
My Mods / Mod Builder - A tool to easily create mods / Support team member / Website - Help us test SMF 2.1!
"I've heard from a reliable source that the Answer is 42. But, still no word on what the question is."