Simple Machines Community Forum

Simple Machines => News and Updates => Topic started by: Oldiesmann on August 12, 2013, 08:34:06 PM

Title: SMF 2.0.5 critical security patch released
Post by: Oldiesmann on August 12, 2013, 08:34:06 PM
Dear users,

Simple Machines Forum is pleased to announce the next security update for the SMF 2.0 product line.

To ensure the continued security of your forum it is advised that you update to SMF 2.0.5 without delay. These vulnerabilities do not impact the SMF 1.1.X branch.

If you are running 2.0.4, you can update your forum to 2.0.5 using the built in package manager. You should see the upgrade notification in the admin panel and in the package manager, allowing you to download and install seamlessly. If you don't have a notification about the update, please run the scheduled task "Fetch Simple Machines files" from the administration panel (Admin -> Maintenance -> Scheduled Tasks). You can also download the update for 2.0.4 from the customize site (http://custom.simplemachines.org/upgrades/): smf_patch_2.0.5.tar.gz, and install it using the package manager.

If you use an older version of SMF, you can upgrade it with the full upgrade packages from the downloads page (http://download.simplemachines.org/). Note that this will remove all installed mods! It is recommended to use the patch as described above.

As always you can find more instructions on our wiki:
upgrading (http://wiki.simplemachines.org/smf/Upgrading)
patching (http://wiki.simplemachines.org/smf/Patching)

Support is available to all users for this upgrade, but it will only be provided in the support board: http://www.simplemachines.org/community/index.php?board=147.0
Please do not use this topic for support related inquiries. 

Charter Members can file a ticket for any assistance or assisted upgrades through the help desk.

Thank you,
SMF Team
Title: Re: SMF 2.0.5 critical security patch released
Post by: Looking on August 12, 2013, 08:38:38 PM
Thanks for the update.
Title: Re: SMF 2.0.5 critical security patch released
Post by: LiroyvH on August 12, 2013, 08:40:00 PM
Thanks guys, good work team! :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Horme Gaming on August 12, 2013, 08:57:13 PM
well done team :D
Title: Re: SMF 2.0.5 critical security patch released
Post by: Antes on August 12, 2013, 08:58:31 PM
Well done !
Title: Re: SMF 2.0.5 critical security patch released
Post by: Liam. on August 12, 2013, 09:04:45 PM
Time to see how many people think this is related to the recent security breach (http://www.simplemachines.org/community/index.php?topic=508232.0).
Title: Re: SMF 2.0.5 critical security patch released
Post by: LiroyvH on August 12, 2013, 09:11:07 PM
Quote from: Liam. on August 12, 2013, 09:04:45 PM
Time to see how many people think this is related to the recent security breach (http://www.simplemachines.org/community/index.php?topic=508232.0).

Not sure if your post was intended as flamebait, but either way: No, it's not related.
That should already become clear the moment you read that announcement. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Horme Gaming on August 12, 2013, 09:16:58 PM
Liam. I predict a few people will think they are related its human nature.  But they will be incorrect as we all know.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Liam. on August 12, 2013, 09:29:36 PM
Quote from: CoreISP on August 12, 2013, 09:11:07 PMNot sure if your post was intended as flamebait, but either way: No, it's not related.
That should already become clear the moment you read that announcement. :)

It wasn't meant to be flame bait, and I know it's not related. It's pretty clear, but there were still people in that thread that didn't manage to understand it regardless of how clear it was!
Title: Re: SMF 2.0.5 critical security patch released
Post by: LiroyvH on August 12, 2013, 09:37:05 PM
Quote from: Liam. on August 12, 2013, 09:29:36 PM
It wasn't meant to be flame bait, and I know it's not related. It's pretty clear, but there were still people in that thread that didn't manage to understand it regardless of how clear it was!

Ah, good :)
Yes, there were. And I'm afraid, as Runic points out, there always will be. :(

But... That won't stop SMF from making awesome releases when deemed necessary of course! :)

Thanks for your support!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Mstcool on August 12, 2013, 09:59:46 PM
WOOT WOOT!!

I was just thinking about 2.0.5 today lol. XD
Title: Re: SMF 2.0.5 critical security patch released
Post by: Horme Gaming on August 12, 2013, 10:02:43 PM
see we read your mind  ..... mwahahahahaha
Title: Re: SMF 2.0.5 critical security patch released
Post by: ARG01 on August 12, 2013, 10:03:10 PM
Damn, my site is not even open yet and I already need a patch?  ;D

No upgrade notification in the admin panel or the package manager but the downloaded patch installed without a hitch. Thanks peeps.  ;)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Oldiesmann on August 12, 2013, 10:10:28 PM
Quote from: ARG on August 12, 2013, 10:03:10 PM
Damn, my site is not even open yet and I already need a patch?  ;D

No upgrade notification in the admin panel or the package manager but the downloaded patch installed without a hitch. Thanks peeps.  ;)

As a reminder, please run the "Fetch Simple Machines Files" task if you don't see upgrade notifications:
Admin -> Maintenance -> Scheduled Tasks
Check the box in the "Run Now" column next to "Fetch Simple Machines Files" (3rd from the bottom of the list)
Click the "Run Now" button
Title: Re: SMF 2.0.5 critical security patch released
Post by: busterone on August 12, 2013, 10:11:55 PM
Thanks, great work. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Mstcool on August 12, 2013, 10:20:17 PM
Quote from: Μπράιαν "Poύνικ" Ντίκεν on August 12, 2013, 10:02:43 PM
see we read your mind  ..... mwahahahahaha

You sure do. :) :D XD!!!!!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Colin on August 12, 2013, 10:41:29 PM
Thanks all
Title: Re: SMF 2.0.5 critical security patch released
Post by: ladyquack on August 12, 2013, 11:46:20 PM
Well done! Thanks.
Title: Re: SMF 2.0.5 critical security patch released
Post by: sAce on August 13, 2013, 12:50:00 AM
Good work guys.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Alpay on August 13, 2013, 01:43:08 AM
Well done.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Hasanudin on August 13, 2013, 02:34:44 AM
well done.

thx ^_^
Title: Re: SMF 2.0.5 critical security patch released
Post by: cyberjack on August 13, 2013, 03:28:51 AM
Upgraded without any problem with below modifications, thank you

1.   Simple Image Upload    1.4.0     
2.   SMFPacks Shoutbox    1.0.4     
3.   Users Online Today    2.0.3     
4.   Smiiliis    1.0     
5.   No Download Attachment    1.0     
6.   SMF 2.0.5 Update    1.0     
Title: Re: SMF 2.0.5 critical security patch released
Post by: Robert. on August 13, 2013, 04:41:05 AM
Nice work. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Shambles on August 13, 2013, 04:54:24 AM
Quote from: Oldiesmann
...These vulnerabilities do not impact the SMF 1.1.X branch...
You haven't listed any vulnerabilities; it would be good to see what's been fixed/improved, as other software providers do.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Burke ♞ Knight on August 13, 2013, 05:07:41 AM
4 sites with 2 different theme, and a combined total of over 200 mods (But, all 4 use same, so mod count is actually about 50. :P ).

Update installed perfectly.

Had to do the above listed Run Now on 2, but everything worked fine. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: ziycon on August 13, 2013, 05:50:24 AM
Ah life is good, updated forum on one site over my mobile (cellphone for the US peeps) all working grand. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Frikers on August 13, 2013, 06:33:27 AM
Thanks for the update.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Neo_TE on August 13, 2013, 07:12:48 AM
Thanks to the SMF team. :D
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on August 13, 2013, 07:16:44 AM
Shambles, we have never listed the corrected vulnerabilities in the announcements. That would just make it easier for anyone who had bad intentions to find a site which has not upgraded and try them out on that site.
Title: Re: SMF 2.0.5 critical security patch released
Post by: gisfreak on August 13, 2013, 08:39:07 AM
well done devs
Title: Re: SMF 2.0.5 critical security patch released
Post by: Snuffy on August 13, 2013, 08:54:47 AM
First THANKS! for the reminder email I got as a member here, as my MEM is not that great anymore and I need these little reminders!   ;)

GREAT JOB DEV's    8)

I used the package manager and it was fast and slick as ]-[eLL like always!
Keep up the fantastic support to us, that we have come to expect only the BEST from the BEST!
Title: Re: SMF 2.0.5 critical security patch released
Post by: emanuele on August 13, 2013, 09:17:24 AM
Quote from: Shambles on August 13, 2013, 04:54:24 AM
Quote from: Oldiesmann
...These vulnerabilities do not impact the SMF 1.1.X branch...
You haven't listed any vulnerabilities; it would be good to see what's been fixed/improved, as other software providers do.
The changelog contains at least some kind of description of what has been fixed. ;)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Shambles on August 13, 2013, 09:20:35 AM
Quote from: emanuele
The changelog contains at least some kind of description of what has been fixed. ;)
I used the mod parser to see what was in it :)

The pedant within me was simply querying why the phrase "These vulnerabilities" was used when no such vulnerabilities are actually mentioned.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Itchigotim on August 13, 2013, 09:23:24 AM
That was my first thought with the breach not a distant memory. But I don't know that much either. Even so, I'm grateful for the support here. Thanks, team!!
Title: Re: SMF 2.0.5 critical security patch released
Post by: GravuTrad on August 13, 2013, 09:33:28 AM
Any language files change? (seems not but...)
Title: Re: SMF 2.0.5 critical security patch released
Post by: zarachrome on August 13, 2013, 09:41:02 AM
First of all, thank you very much for SMF support.
Now, the questions: must I uninstall my mods (10) and reinstall after the upgrade?
My site has got many mods translated in spanish in separate php files with spanish strings. Will I lose translations?
I am worried because I've made a big modification with a customized theme and SMF Gallery Pro.

Thank you.
Title: Re: SMF 2.0.5 critical security patch released
Post by: emanuele on August 13, 2013, 09:41:50 AM
Quote from: GravuTrad on August 13, 2013, 09:33:28 AM
Any language files change? (seems not but...)
Check yourself:
http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_2.0.5.tar.gz;smf_version=2.0.4
Title: Re: SMF 2.0.5 critical security patch released
Post by: emanuele on August 13, 2013, 09:42:23 AM
Quote from: zarachrome on August 13, 2013, 09:41:02 AM
Now, the questions: must I uninstall my mods (10) and reinstall after the upgrade?
No, just go to the admin panel and install the patch as a normal mod.
Title: Re: SMF 2.0.5 critical security patch released
Post by: GravuTrad on August 13, 2013, 09:44:39 AM
Yes i checked the xml file, thanks ema.
Title: Re: SMF 2.0.5 critical security patch released
Post by: zarachrome on August 13, 2013, 10:16:19 AM
Quote from: emanuele on August 13, 2013, 09:42:23 AM
Quote from: zarachrome on August 13, 2013, 09:41:02 AM
Now, the questions: must I uninstall my mods (10) and reinstall after the upgrade?
No, just go to the admin panel and install the patch as a normal mod.

Ah, Ok. Good news.
Thank you very much :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Mick. on August 13, 2013, 11:24:43 AM
Awesome!!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on August 13, 2013, 11:36:51 AM
Nice job on the patch guys.

Please don't suggest that people should re-run the Fetch SM Files task. It's run on an infrequent basis (no less than once a week) to avoid the servers here being hammered...
Title: Re: SMF 2.0.5 critical security patch released
Post by: French on August 13, 2013, 12:45:36 PM
Great well done..........Also a high five for the translation teams for updating the language packs
Title: Re: SMF 2.0.5 critical security patch released
Post by: Apllicmz on August 13, 2013, 02:04:22 PM
Thanks for the update.
[/size]Good Work
Title: Re: SMF 2.0.5 critical security patch released
Post by: Chalky on August 13, 2013, 03:03:35 PM
That was almost ridiculously easy, smooth and seamless!  Thanks guys  :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Mick. on August 13, 2013, 03:05:29 PM
lol I got the white screen of death.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Chalky on August 13, 2013, 03:13:26 PM
Serves you right for using 00000webhost  :P
Title: Re: SMF 2.0.5 critical security patch released
Post by: Mick. on August 13, 2013, 03:14:28 PM
Quote from: ChalkCat on August 13, 2013, 03:13:26 PM
Serves you right for using 00000webhost  :P
hahaha. I'm on a vps with a diff provider.  I'm rollin!
Title: Re: SMF 2.0.5 critical security patch released
Post by: vtel57 on August 13, 2013, 04:33:12 PM
Outstanding as always!

(http://img.photobucket.com/albums/v647/vtel57/Forum%20Posts/first-place-blue-ribbon_zps68d80c84.gif)

Thanks very much to all of you who work so hard to make Simple Machines a first rate product. :)

~Eric
Title: Re: SMF 2.0.5 critical security patch released
Post by: electricwildflower on August 13, 2013, 04:54:28 PM
Thank you great job installed it on my test forum and works fine with all my mods then upgraded my main forum and so far so good. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Dhayzon on August 13, 2013, 11:05:33 PM
thx you very you very much
Title: Re: SMF 2.0.5 critical security patch released
Post by: medicMe on August 14, 2013, 03:46:10 AM
Read through the parsed install.. simple and clean changes.


Installed perfectly fine. No issues at all. :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Gary on August 14, 2013, 03:48:06 AM
Updated in 10 seconds flat.


I take it, that's a good thing? :P
Title: Re: SMF 2.0.5 critical security patch released
Post by: MoreBloodWine on August 14, 2013, 07:02:02 AM
I'm using he update your forum link from the admin area and I keep getting this.

Not Acceptable

An appropriate representation of the requested resource /index.php could not be found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

---

I normally use IE and was getting a window with no real info in it, so I tried FF and got the above. All my sites are doing it but all are functiong just fine.


Edit: Stricken out since I guess I made one of those SMF snafu's lol
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on August 14, 2013, 07:12:16 AM
This thread is not for support... Please open a support thread.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Campanule on August 14, 2013, 09:56:50 AM
Thank you so much - I updated without any problems. You are great  :D
Title: Re: SMF 2.0.5 critical security patch released
Post by: rentner on August 14, 2013, 10:02:34 AM
Short, quickly, easy. Great as always

Many thanks.
Title: Re: SMF 2.0.5 critical security patch released
Post by: johnpaul2k2 on August 14, 2013, 10:28:09 AM
(http://www.likeateam.com/wp-content/uploads/2012/09/did-you-do-a-good-job-at-work-today.png)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Luis- on August 14, 2013, 01:40:47 PM
Brilliant, thanks!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kenny01 on August 14, 2013, 03:43:32 PM
Great thanks.
Title: Re: SMF 2.0.5 critical security patch released
Post by: impreza on August 14, 2013, 04:32:33 PM
thanks for new.
Title: Re: SMF 2.0.5 critical security patch released
Post by: butchs on August 14, 2013, 07:28:24 PM
Thanks for the update!
Title: Re: SMF 2.0.5 critical security patch released
Post by: sumking on August 14, 2013, 10:54:39 PM
Bueno, gracias
Title: Re: SMF 2.0.5 critical security patch released
Post by: technopoptart on August 14, 2013, 11:24:14 PM
Installed using package manager, still being told that files are out of date and the footer says 2.0.4.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on August 15, 2013, 12:57:03 AM
then it did not fully apply the package update patch...
Title: Re: SMF 2.0.5 critical security patch released
Post by: -=[Vyorel]=- on August 15, 2013, 03:30:22 AM
Great announce, thanks!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Imutep on August 15, 2013, 11:49:59 AM
Thanks for your effort and work!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Darkness_Black on August 15, 2013, 02:02:29 PM
Thank You.
Title: Re: SMF 2.0.5 critical security patch released
Post by: at1with0 on August 15, 2013, 02:21:31 PM
I get this when I click the link to update to 2.0.5:

Forbidden

You don't have permission to access /forum/index.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Horme Gaming on August 15, 2013, 02:23:12 PM
please create a new topic in the relevant support section.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Sudhakar Arjunan on August 15, 2013, 04:54:10 PM
Oldiesmann thanks for the upgrade. Keep rocking and make us safe from attackers and spams.

Found the version was not changed to 2.0.5 in my forum after upgrade  :-X
Title: Re: SMF 2.0.5 critical security patch released
Post by: Chalky on August 15, 2013, 05:01:19 PM
Quote from: A.SK on August 15, 2013, 04:54:10 PM
Found the version was not changed to 2.0.5 in my forum after upgrade  :-X

Quote from: Kindred on August 15, 2013, 12:57:03 AM
then it did not fully apply the package update patch...

;)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on August 16, 2013, 04:28:10 PM
No. The large upgrade will remove any mods you have.

Grab the patch (since that's all it is) from http://custom.simplemachines.org/upgrades/
Title: Re: SMF 2.0.5 critical security patch released
Post by: Dav999 on August 16, 2013, 04:38:04 PM
Quote from: Arantor on August 16, 2013, 04:28:10 PM
No. The large upgrade will remove any mods you have.

Grab the patch (since that's all it is) from http://custom.simplemachines.org/upgrades/

I had deleted my post because I didn't see the link in the first post... But thanks anyway!

EDIT: And I installed it successfully! :)
Title: Re: SMF 2.0.5 critical security patch released
Post by: Srinib on August 17, 2013, 06:08:05 AM
Upgraded my forum from 2.0.4 to 2.0.5. It was so quick and easy.
Thanks a lot to everyone who has contributed to this upgrade.
Title: Re: SMF 2.0.5 critical security patch released
Post by: SebaS on August 17, 2013, 03:42:43 PM
thanks ;)

(http://img585.imageshack.us/img585/5736/qp17.jpg)
Title: Re: SMF 2.0.5 critical security patch released
Post by: sangham.net on August 19, 2013, 03:06:00 AM
Thanks for your care. As you know me already as a "bothering" brother with disturbing questions while common satisfaction,  I thought I would not be able to lose more reputation and kindly request: what the exact content, issue and effect of this update is.

That would - how ever - not limit any approximate gratitude.

Thanks for enlightenment and public information in advanced!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Tony Reid on August 19, 2013, 08:15:13 AM
@Johann B

Quote from: emanuele
Check yourself:
http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_2.0.5.tar.gz;smf_version=2.0.4
Title: Re: SMF 2.0.5 critical security patch released
Post by: emanuele on August 19, 2013, 08:19:52 AM
Or if you want a generic idea of what has been fixed go to http://download.simplemachines.org/ and download the changelog.
Title: Re: SMF 2.0.5 critical security patch released
Post by: sangham.net on August 19, 2013, 02:45:55 PM
Quote from: Tony Reid on August 19, 2013, 08:15:13 AM
@Johann B

Quote from: emanuele
Check yourself:
http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_2.0.5.tar.gz;smf_version=2.0.4

Thanks for your generous share and detail explaining. Even every string and space is visible.
Title: Re: SMF 2.0.5 critical security patch released
Post by: ZakNik on August 19, 2013, 05:22:03 PM
is there any notification mod like one on facebook for smf forum...when i qoute someone or like his post that he get notification not on mail???

(http://www.firstpost.com/wp-content/uploads/2012/06/Facebook_notifications_screengrab.jpg) something like that but only for notification...2.0.4. version
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on August 19, 2013, 05:23:16 PM
I don't believe so.
Title: Re: SMF 2.0.5 critical security patch released
Post by: ZakNik on August 19, 2013, 05:27:48 PM
some forums have maybe you can adjust that with vbulletin?
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on August 19, 2013, 05:28:50 PM
Maybe but not with SMF at this time, and I doubt anyone here wants to pay $200 for the latest incarnation of vBulletin complete with missing features, like it launching without any way to warn users.
Title: Re: SMF 2.0.5 critical security patch released
Post by: ZakNik on August 19, 2013, 05:31:39 PM
i'm  :-\ why they don't make notification mod? is  that hard to make one?
Title: Re: SMF 2.0.5 critical security patch released
Post by: Chalky on August 19, 2013, 05:43:50 PM
There's the ENotify  (http://custom.simplemachines.org/mods/index.php?mod=2198)mod but I've never used it.  This isn't the place for this discussion though, this is about the security patch.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on August 19, 2013, 06:23:35 PM
ummm....  Why the heck are you asking this question in the version release announcement thread?  This thread is not for support and your questions and comments have nothing at all to do with the release.
Title: Re: SMF 2.0.5 critical security patch released
Post by: PlaneShift on September 13, 2013, 06:36:49 AM
We have upgraded to 2.0.4 and then to 2.0.5 few days ago, I logged in today in the admin page and I see this:

Version Information:
Forum version: SMF 2.0.5
Current SMF version: SMF 1.1.18

Why is the current pointing to 1.1.x ? Is there a way to fix this? May this cause any problems with future upgrades?
Title: Re: SMF 2.0.5 critical security patch released
Post by: emanuele on September 13, 2013, 07:42:03 AM
Because your SMF had a problem while fetching the latest version from the sm.org servers.
Nothing to worry about, it will clean up by itself.
Title: Re: SMF 2.0.5 critical security patch released
Post by: TrueZone on September 16, 2013, 06:54:24 AM
Thank you for update, you all make a great work !!!!

I want to ask, if i install a new theme, and  i already have modified the previsious theme with some plugins and pacakges. Will remain this modifications, on  the new theme ?

Thank you again!
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on September 16, 2013, 08:08:56 AM
there were no changes to template files

as for your question - it is not relevant to the security patch - but no. If you add a new theme, any mods which affect the templates used by that theme would have to be manually applied
Title: Re: SMF 2.0.5 critical security patch released
Post by: SwedishMarch1964 on September 16, 2013, 12:07:56 PM
Congrats on the new version of SMF!
Title: Re: SMF 2.0.5 critical security patch released
Post by: zainilove on September 24, 2013, 06:58:10 PM
such long time not going to this forum
I didn't know if SMF is already on 2.0.5 version
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on September 24, 2013, 07:00:13 PM
Quote from: zainilove on September 24, 2013, 06:58:10 PM
such long time not going to this forum
I didn't know if SMF is already on 2.0.5 version

The fact this topic is out and says that '2.0.5 patch is released'... yes, SMF is on 2.0.5.
Title: Re: SMF 2.0.5 critical security patch released
Post by: hadesflames on September 30, 2013, 07:57:44 PM
Pretty sure something was lost in translation there =p
Title: Re: SMF 2.0.5 critical security patch released
Post by: azkia on October 01, 2013, 05:26:59 AM
Quote from: Oldiesmann on August 12, 2013, 08:34:06 PM
Dear users,

Simple Machines Forum is pleased to announce the next security update for the SMF 2.0 product line.

To ensure the continued security of your forum it is advised that you update to SMF 2.0.5 without delay. These vulnerabilities do not impact the SMF 1.1.X branch.

If you are running 2.0.4, you can update your forum to 2.0.5 using the built in package manager. You should see the upgrade notification in the admin panel and in the package manager, allowing you to download and install seamlessly. If you don't have a notification about the update, please run the scheduled task "Fetch Simple Machines files" from the administration panel (Admin -> Maintenance -> Scheduled Tasks). You can also download the update for 2.0.4 from the customize site (http://custom.simplemachines.org/upgrades/): smf_patch_2.0.5.tar.gz, and install it using the package manager.

If you use an older version of SMF, you can upgrade it with the full upgrade packages from the downloads page (http://download.simplemachines.org/). Note that this will remove all installed mods! It is recommended to use the patch as described above.

As always you can find more instructions on our wiki:
upgrading (http://wiki.simplemachines.org/smf/Upgrading)
patching (http://wiki.simplemachines.org/smf/Patching)

Support is available to all users for this upgrade, but it will only be provided in the support board: http://www.simplemachines.org/community/index.php?board=147.0
Please do not use this topic for support related inquiries. 

Charter Members can file a ticket for any assistance or assisted upgrades through the help desk.

Thank you,
SMF Team


thank you,,,,,i like this forum...thanks again to smf team
Title: Re: SMF 2.0.5 critical security patch released
Post by: hanif on October 12, 2013, 12:43:06 PM
Thanks guys, good work team!  :D







Br,
HANIF
Title: Re: SMF 2.0.5 critical security patch released
Post by: ArchKnight on October 14, 2013, 12:36:08 PM
Can this package used to upgrade from 2.0.2?
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on October 14, 2013, 12:37:44 PM
the patch PACKAGE from the package manager? No.
The patches must be applied from version to next version
2.0.2 -> 2.0.3 -> 2.0.4 -> 2.0.5

The large upgrade archive CAN be applied to ANY previous version - but will remove all of your mods in the process.
Title: Re: SMF 2.0.5 critical security patch released
Post by: ArchKnight on October 14, 2013, 01:04:57 PM
If I upgrade from
2.0.2 -> 2.0.3 -> 2.0.4 -> 2.0.5, I won't lose mods?
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on October 14, 2013, 01:09:01 PM
Correct, if you use the patches to go from version to version (and NOT the large upgrade) you will not lose mods.
Title: Re: SMF 2.0.5 critical security patch released
Post by: ArchKnight on October 14, 2013, 01:51:33 PM
Thanks for the help with it mate.
Title: Re: SMF 2.0.5 critical security patch released
Post by: Kindred on October 14, 2013, 01:52:24 PM
if you use the PATCH files in the PACKAGE MANAGER, no, you won't lose mods....

If you use ANY of the "large upgrade" archives, then yes.. you will

ninja'd.....
Title: Re: SMF 2.0.5 critical security patch released
Post by: Arantor on October 14, 2013, 01:54:24 PM
Also it might be worth locking this; it's been two months since this was announced.