Advertisement:

Author Topic: SMF 2.0.9 / 1.1.20 Security Patches Released  (Read 940284 times)

Offline Oldiesmann

  • Lead Developer
  • SMF Super Hero
  • *
  • Posts: 24,730
  • Gender: Male
  • Ask me about the function DB :)
    • oldiesmann on Facebook
    • Oldiesmann on GitHub
    • http://www.linkedin.com/in/michaeleshom on LinkedIn
    • @oldiesmann on Twitter
    • Archie Comics Fan Forum
SMF 2.0.9 / 1.1.20 Security Patches Released
« on: October 02, 2014, 07:13:55 PM »
Dear users,

Simple Machines Forum has released security patches to both the 1.1.x and the 2.0.x release lines. This brings our released versions to SMF 1.1.20 and SMF 2.0.9.

Several security issues were identified in both release lines and have been addressed with this patch.  It is, therefore, recommended that you update your forums immediately to ensure that your community is safe.  In addition to the security patches, a few bug fixes for the SMF 2.0 line have also been included in the 2.0.9 patch.

If you are running version 2.0.8, you can update your forum to version 2.0.9 using the package manager. As usual, you should see the upgrade notification in the Admin panel and in the package manager, which will allow you to download and install the patch seamlessly.  If you don't see the notification about the update, please run the scheduled task "Fetch Simple Machines files".  You can also download the patch for 2.0.9 from the customize site by downloading the smf_patch_1.1.20_2.0.9.zip patch file, and then installing it from the package manager, like any other mod package.

If you are running 1.1.19, you can update to 1.1.20 by using the smf_patch_1.1.20_2.0.9.zip patch file and installing it via the package manager as well.  If you are still using 1.1.x branch, please be aware this will be the last patch released for this version, so you are strongly urged to upgrade to 2.0.9, in order to be able to continue to receive security upgrades to your forum. Note that we will continue to provide support for 1.1 until 2.1 final is released.

If you use older versions of SMF, you can upgrade by using the full upgrade archive for version 2.0.9 from the downloads page. Be aware that using this upgrade method will require you to replace your mods with ones designed for the 2.0.x line

You can also view the change log for the latest release, as usual, on the downloads page.

If you are having problems downloading the patch from the admin panel, you can download the package from the upgrade patches page and install it like a mod, as instructed above.

Please refer to the Online Manual for more details about:
* upgrading
* patching

Please do not use this topic for support requests.  You will receive a much quicker and better response by posting in the relevant support board!

Thank you for using SMF! :)

Regards,
Simple Machines Forum

Offline Looking

  • SMF Hero
  • ******
  • Posts: 2,008
  • SMF Customization
    • SMF Custom Themes
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #1 on: October 02, 2014, 07:16:03 PM »
Thanks for keeping us up to date!

Offline ApplianceJunk

  • SMF Hero
  • ******
  • Posts: 3,458
    • ApplianceJunk.com
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #2 on: October 02, 2014, 07:20:29 PM »
Thanks

Offline ARG

  • Full Member
  • ***
  • Posts: 564
  • Dziner Studio
    • @MiSkywarn on Twitter
    • Dziner Studio
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #3 on: October 02, 2014, 08:04:53 PM »
Appreciated.  ;)
« Last Edit: October 02, 2014, 08:16:57 PM by SimpMode »

Offline Illori

  • Support Specialist
  • SMF Master
  • *
  • Posts: 43,214
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #4 on: October 02, 2014, 08:15:56 PM »
Appreciated.  But where is the 2.0.9 patch download? The Upgrade Downloads page only supplies up to 2.0.8. ;)

it is on the bottom of the list.

Offline ARG

  • Full Member
  • ***
  • Posts: 564
  • Dziner Studio
    • @MiSkywarn on Twitter
    • Dziner Studio
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #5 on: October 02, 2014, 08:17:28 PM »
LOL. I just noticed that.  ;D

Offline SaltedW

  • Full Member
  • ***
  • Posts: 550
  • Web Systems Since 1995 SMF Since 2005
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #6 on: October 02, 2014, 08:40:35 PM »
No issues works well, thank you.
You have a choice in life, run it yourself. Or abandon freedom and let others do it for you.

Offline KVL

  • Semi-Newbie
  • *
  • Posts: 16
  • Gender: Male
  • SMF: 1.1.21, 2.0.10
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #7 on: October 02, 2014, 09:09:25 PM »
Updated is successfully. :) Thank you very much SMF team for your very great job! :)

Many thanks to SMF! :)

Offline vbgamer45

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,012
    • smfhacks on Facebook
    • VBGAMER45 on GitHub
    • @createaforum on Twitter
    • SMF For Free
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #8 on: October 02, 2014, 09:10:38 PM »
Congrats on the release! Thanks for update to SMF 1.1.x as well
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Offline Mstcool

  • Sr. Member
  • ****
  • Posts: 900
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #9 on: October 02, 2014, 09:43:29 PM »
Woot Woot! :D

Offline forumdraco

  • Semi-Newbie
  • *
  • Posts: 15
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #10 on: October 03, 2014, 03:34:41 AM »
Strange, on one forum I see the 2.0.9 in the Administration Center and I can upgrade using the package manager, on another forum it says 2.0.8 is the latest release... any idea how this is possible?

Offline ThomasJones

  • Newbie
  • *
  • Posts: 1
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #11 on: October 03, 2014, 04:05:06 AM »
Really nice work guys ~ will update when I get to work  :D

Offline tandro

  • Semi-Newbie
  • *
  • Posts: 14
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #12 on: October 03, 2014, 04:18:31 AM »

Many thanks to SMF Team for keeping us up to date! !!!

Offline Fisch.666

  • Jr. Member
  • **
  • Posts: 192
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #13 on: October 03, 2014, 04:31:30 AM »
Hi,

when checking for newer files in the board maintenance the Subs-Post.php is shown as "my version 2.0.8" and the "current version 2.0.9" when applying the patch via the package manager. Seems the header @version 2.0.8 was not updated by the patch.

Strange, on one forum I see the 2.0.9 in the Administration Center and I can upgrade using the package manager, on another forum it says 2.0.8 is the latest release... any idea how this is possible?

You need to run the Task "fetch simple machines data" in your planned tasks (maintenance)

Offline Herman's Mixen

  • SMF Hero
  • ******
  • Posts: 7,228
    • Herman's Mixen
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #14 on: October 03, 2014, 04:45:00 AM »
Not all files are patched only the security ones wich needed to be patched ;)
Met vriendelijke groet, The Burglar!

 House Mixes | Mixcloud | Any Intelligent fool can make things bigger, more complex, and more violent.
It takes a touch of genius - and a lot of courage - to move in the opposite direction. - Albert Einstein

Former Godfather of our dutch community ;)

Offline Fisch.666

  • Jr. Member
  • **
  • Posts: 192
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #15 on: October 03, 2014, 04:52:03 AM »
Hi,

the Subs-Posts.php was patched in the smf_2-0-9_patch.xml or am i wrong?

Online margarett

  • Lead Support Specialist
  • SMF Super Hero
  • *
  • Posts: 19,617
  • Gender: Male
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #16 on: October 03, 2014, 05:05:34 AM »
Subs-Post.php (no "s") was.
Se forem conduzir, não bebam. Se forem beber... CHAMEM-ME!!!! :D

Quote
Over 90% of all computer problems can be traced back to the interface between the keyboard and the chair

Offline Fisch.666

  • Jr. Member
  • **
  • Posts: 192
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #17 on: October 03, 2014, 05:22:26 AM »
Ok, so probably just the header wasn't update. Have now done this manually

Offline forumdraco

  • Semi-Newbie
  • *
  • Posts: 15
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #18 on: October 03, 2014, 05:44:34 AM »
Strange, on one forum I see the 2.0.9 in the Administration Center and I can upgrade using the package manager, on another forum it says 2.0.8 is the latest release... any idea how this is possible?

You need to run the Task "fetch simple machines data" in your planned tasks (maintenance)

Thanks, that did the trick! ;-)

Offline Mr.Truckman

  • Semi-Newbie
  • *
  • Posts: 65
  • Gender: Male
    • mr.seui on Facebook
    • @Thailandmoving on Twitter
    • Mr.Truckman
Re: SMF 2.0.9 / 1.1.20 Security Patches Released
« Reply #19 on: October 03, 2014, 08:04:01 AM »
Thanks  ;D