Advertisement:

Author Topic: SMF 2.0.5 critical security patch released  (Read 1705720 times)

Offline Oldiesmann

  • Lead Developer
  • SMF Super Hero
  • *
  • Posts: 24,722
  • Gender: Male
  • Ask me about the function DB :)
    • oldiesmann on Facebook
    • Oldiesmann on GitHub
    • http://www.linkedin.com/in/michaeleshom on LinkedIn
    • @oldiesmann on Twitter
    • Archie Comics Fan Forum
SMF 2.0.5 critical security patch released
« on: August 12, 2013, 08:34:06 PM »
Dear users,

Simple Machines Forum is pleased to announce the next security update for the SMF 2.0 product line.

To ensure the continued security of your forum it is advised that you update to SMF 2.0.5 without delay. These vulnerabilities do not impact the SMF 1.1.X branch.

If you are running 2.0.4, you can update your forum to 2.0.5 using the built in package manager. You should see the upgrade notification in the admin panel and in the package manager, allowing you to download and install seamlessly. If you don't have a notification about the update, please run the scheduled task "Fetch Simple Machines files" from the administration panel (Admin -> Maintenance -> Scheduled Tasks). You can also download the update for 2.0.4 from the customize site (http://custom.simplemachines.org/upgrades/): smf_patch_2.0.5.tar.gz, and install it using the package manager.

If you use an older version of SMF, you can upgrade it with the full upgrade packages from the downloads page. Note that this will remove all installed mods! It is recommended to use the patch as described above.

As always you can find more instructions on our wiki:
upgrading
patching

Support is available to all users for this upgrade, but it will only be provided in the support board: http://www.simplemachines.org/community/index.php?board=147.0
Please do not use this topic for support related inquiries. 

Charter Members can file a ticket for any assistance or assisted upgrades through the help desk.

Thank you,
SMF Team
« Last Edit: August 12, 2013, 09:12:47 PM by Oldiesmann »

Offline Looking

  • SMF Hero
  • ******
  • Posts: 2,008
  • SMF Customization
    • SMF Custom Themes
Re: SMF 2.0.5 critical security patch released
« Reply #1 on: August 12, 2013, 08:38:38 PM »
Thanks for the update.

Online CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 15,417
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SMF 2.0.5 critical security patch released
« Reply #2 on: August 12, 2013, 08:40:00 PM »
Thanks guys, good work team! :)
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline Bryan D

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 21,938
  • Gender: Male
  • His Royal Runicness
    • bryan.deakin.1 on Facebook
    • pouvik on GitHub
    • @bryandeakin on Twitter
Re: SMF 2.0.5 critical security patch released
« Reply #3 on: August 12, 2013, 08:57:13 PM »
well done team :D

Online Antes

  • Evil Black Cat
  • Marketing
  • SMF Hero
  • *
  • Posts: 7,684
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @antesistan on Twitter
    • MMOBrowser
Re: SMF 2.0.5 critical security patch released
« Reply #4 on: August 12, 2013, 08:58:31 PM »
Well done !
- Solutions for everyone, It's that simple.

[ ezPortal 3.1 ] # [ Donate ] # Responsive Kitteh

Offline Liam.

  • SMF Hero
  • ******
  • Posts: 2,240
  • Gender: Male
Re: SMF 2.0.5 critical security patch released
« Reply #5 on: August 12, 2013, 09:04:45 PM »
Time to see how many people think this is related to the recent security breach.

Online CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 15,417
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SMF 2.0.5 critical security patch released
« Reply #6 on: August 12, 2013, 09:11:07 PM »
Time to see how many people think this is related to the recent security breach.

Not sure if your post was intended as flamebait, but either way: No, it's not related.
That should already become clear the moment you read that announcement. :)
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline Bryan D

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 21,938
  • Gender: Male
  • His Royal Runicness
    • bryan.deakin.1 on Facebook
    • pouvik on GitHub
    • @bryandeakin on Twitter
Re: SMF 2.0.5 critical security patch released
« Reply #7 on: August 12, 2013, 09:16:58 PM »
Liam. I predict a few people will think they are related its human nature.  But they will be incorrect as we all know.

Offline Liam.

  • SMF Hero
  • ******
  • Posts: 2,240
  • Gender: Male
Re: SMF 2.0.5 critical security patch released
« Reply #8 on: August 12, 2013, 09:29:36 PM »
Not sure if your post was intended as flamebait, but either way: No, it's not related.
That should already become clear the moment you read that announcement. :)

It wasn't meant to be flame bait, and I know it's not related. It's pretty clear, but there were still people in that thread that didn't manage to understand it regardless of how clear it was!

Online CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 15,417
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SMF 2.0.5 critical security patch released
« Reply #9 on: August 12, 2013, 09:37:05 PM »
It wasn't meant to be flame bait, and I know it's not related. It's pretty clear, but there were still people in that thread that didn't manage to understand it regardless of how clear it was!

Ah, good :)
Yes, there were. And I'm afraid, as Runic points out, there always will be. :(

But... That won't stop SMF from making awesome releases when deemed necessary of course! :)

Thanks for your support!
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline Mstcool

  • Sr. Member
  • ****
  • Posts: 899
Re: SMF 2.0.5 critical security patch released
« Reply #10 on: August 12, 2013, 09:59:46 PM »
WOOT WOOT!!

I was just thinking about 2.0.5 today lol. XD

Offline Bryan D

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 21,938
  • Gender: Male
  • His Royal Runicness
    • bryan.deakin.1 on Facebook
    • pouvik on GitHub
    • @bryandeakin on Twitter
Re: SMF 2.0.5 critical security patch released
« Reply #11 on: August 12, 2013, 10:02:43 PM »
see we read your mind  ..... mwahahahahaha

Offline Also Gone

  • SMF Hero
  • ******
  • Posts: 2,523
  • I Don't Shower Much
    • Files4Design
Re: SMF 2.0.5 critical security patch released
« Reply #12 on: August 12, 2013, 10:03:10 PM »
Damn, my site is not even open yet and I already need a patch?  ;D

No upgrade notification in the admin panel or the package manager but the downloaded patch installed without a hitch. Thanks peeps.  ;)

Offline Oldiesmann

  • Lead Developer
  • SMF Super Hero
  • *
  • Posts: 24,722
  • Gender: Male
  • Ask me about the function DB :)
    • oldiesmann on Facebook
    • Oldiesmann on GitHub
    • http://www.linkedin.com/in/michaeleshom on LinkedIn
    • @oldiesmann on Twitter
    • Archie Comics Fan Forum
Re: SMF 2.0.5 critical security patch released
« Reply #13 on: August 12, 2013, 10:10:28 PM »
Damn, my site is not even open yet and I already need a patch?  ;D

No upgrade notification in the admin panel or the package manager but the downloaded patch installed without a hitch. Thanks peeps.  ;)

As a reminder, please run the "Fetch Simple Machines Files" task if you don't see upgrade notifications:
Admin -> Maintenance -> Scheduled Tasks
Check the box in the "Run Now" column next to "Fetch Simple Machines Files" (3rd from the bottom of the list)
Click the "Run Now" button

Offline busterone

  • SMF Hero
  • ******
  • Posts: 2,150
  • Gender: Male
  • Devil Dog
    • The Demon's Den
Re: SMF 2.0.5 critical security patch released
« Reply #14 on: August 12, 2013, 10:11:55 PM »
Thanks, great work. :)

Offline Mstcool

  • Sr. Member
  • ****
  • Posts: 899
Re: SMF 2.0.5 critical security patch released
« Reply #15 on: August 12, 2013, 10:20:17 PM »
see we read your mind  ..... mwahahahahaha

You sure do. :) :D XD!!!!!

Offline Colin

  • Customizer
  • SMF Hero
  • *
  • Posts: 7,128
  • Gender: Male
  • SMF Customizer
    • colinschoen on GitHub
Re: SMF 2.0.5 critical security patch released
« Reply #16 on: August 12, 2013, 10:41:29 PM »
Thanks all
"If everybody is thinking alike, then somebody is not thinking." - Gen. George S. Patton Jr.

Colin

Offline ladyquack

  • Newbie
  • *
  • Posts: 4
Re: SMF 2.0.5 critical security patch released
« Reply #17 on: August 12, 2013, 11:46:20 PM »
Well done! Thanks.

Offline sAce

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 2,992
    • @sbplus_t on Twitter
    • SB+
Re: SMF 2.0.5 critical security patch released
« Reply #18 on: August 13, 2013, 12:50:00 AM »
Good work guys.

Offline Alpay

  • Language Moderator
  • SMF Hero
  • *
  • Posts: 3,523
  • Gender: Male
    • Personal Web Page
Re: SMF 2.0.5 critical security patch released
« Reply #19 on: August 13, 2013, 01:43:08 AM »
Well done.