2.0.9? Wut?

[Ninja ZX-10RR]

Can I say that I feel somehow safe? Nice to see that you are both testing this release and also nice to see that you are always watching our back or at least you are trying to. Many thanks for that.

[Kelsie]

So are the holes going to be fixed eventually, or is it not worth the time to try to fix until it becomes exploited or what?

[Steve]

I think you're misreading the thread. The update includes bug fixes and the closing of two minor security holes.

That's how I read it anyway.

[Antes]

So are the holes going to be fixed eventually, or is it not worth the time to try to fix until it becomes exploited or what?

Do you know any? We can't fix something we don't know right?, so yes it needs to be exploited in some place to be known.

[Kindred]

So are the holes going to be fixed eventually, or is it not worth the time to try to fix until it becomes exploited or what?

I am confused.

What holes do you know about in 2.0.8?
We have had two reports of minor issues (minor because they are not technically able to be exploited under normal circumstances - but we're fixing them anyway)

If you actually know of any holes or reports of holes in SMF 2.0.8, I would ask you to submit a security report.
http://www.simplemachines.org/about/smf/security.php

otherwise, we will complete the release of 2.0.9 when it has been confirmed tested and stable.
There will be an official announcement when that happens. Until then, just sit back and relax.

[Arantor]

Just to clarify since there is a question mark here.

I know of 2 holes in 2.0.8. I reported both, and both should be fixed in 2.0.9. Neither hole has, to my knowledge, been exploited either.