News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

SMF 1.1.19 and 2.0.6 critical security patches released

Started by Illori, October 21, 2013, 10:18:01 AM

Previous topic - Next topic

Illori

Dear users,

Simple Machines Forum has released security patches to both the 1.1.x and the 2.0.x release lines. This brings our released versions to SMF 1.1.19 and SMF 2.0.6.

Several security issues were identified in both release lines and have been addressed with this patch.  It is, therefore, recommended that you update your forums immediately to ensure that your community is safe.  In addition to the security patches, a few bug fixes for the SMF 2.0 line have also been included in the 2.0.6 patch.

If you are running version 2.0.5, you can update your forum to version 2.0.6 using the package manager. As usual, you should see the upgrade notification in the Admin panel and in the package manager, which will allow you to download and install the patch seamlessly.  If you don't see the notification about the update, please run the scheduled task "Fetch Simple Machines files".  You can also download the patch for 2.0.6 from the customize site by downloading the : smf_patch_1.1.19_2.0.6.tar.gz patch file, and then installing it from the package manager, like any other mod package.

If you are running 1.1.18, you can update to 1.1.19 by using the smf_patch_1.1.19_2.0.6.tar.gz patch file and installing it via the package manager as well.  If you are still using 1.1.x branch, please be aware this may be one of the last patches released for this version, so you are strongly urged to upgrade to 2.0.6, in order to be able to continue to receive security upgrades to your forum.

If you use older versions of SMF, you can upgrade by using the full upgrade archive for version 2.0.6 from the downloads page. Be aware that using this upgrade method will require you to reinstall your mods with ones designed for the 2.0.x line

You can also view the change log for the latest release, as usual, on the downloads page.

If you are having problems downloading the patch from the admin panel, you can download the package from the upgrade patches page and install it like a mod, as instructed above.

Please refer to the Online Manual for more details about:
* upgrading
* patching

Please do not use this topic for support requests.  You will receive a much quicker and better response by posting in the relevant support board!

Thank you for using SMF! :)


Regards,
Simple Machines Forum

LiroyvH

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

vbgamer45

Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Antechinus

Bit premature on the announcement. The patches aren't actually on those pages yet. :)

Burke ♞ Knight

Already being worked on.
I brought this up, and they are working on it, as we speak. :)

LiroyvH

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

GravuTrad

Quote from: Antechinus on October 22, 2013, 06:36:56 PM
Bit premature on the announcement. The patches aren't actually on those pages yet. :)

yes it seems. 1.1.18 patched to 1.1.18 and 2.0.5 patched to 2.0.5, normally no matches lol....versioning forgotten again?
On a toujours besoin d'un plus petit que soi! (Petit!Petit!)


Think about Search function before posting.
Pensez à la fonction Recherche avant de poster.

Arantor

Doing a release is quite a complex process given the mirrors and everything else in the site architecture that needs updating. We're working on it as I write this :)

Antes

Important thing is the patch and very well done to our developers... they did fantastic job yet again :)

Thanks!

Burke ♞ Knight

Indeed!
Way to go dev team, and the others that helped out. :)

GravuTrad

Quote from: Arantor on October 22, 2013, 07:15:38 PM
Doing a release is quite a complex process given the mirrors and everything else in the site architecture that needs updating. We're working on it as I write this :)

;)

Premature annoucement only so.

Thanks for all the great work guys. ;)
On a toujours besoin d'un plus petit que soi! (Petit!Petit!)


Think about Search function before posting.
Pensez à la fonction Recherche avant de poster.

Arantor

#11
We thought it was best to get this topic out there - including where one can download the patch immediately - while we got everything else sorted out. Right now it should only be the upgrade site that's in need of work and we're on the case.


EDIT: And it appears to be sorted out now :)

GravuTrad

On a toujours besoin d'un plus petit que soi! (Petit!Petit!)


Think about Search function before posting.
Pensez à la fonction Recherche avant de poster.

iMiKK


Daniel15

QuoteSeveral security issues were identified in both release lines and have been addressed with this patch.  It is, therefore, recommended that you update your forums immediately to ensure that your community is safe.  In addition to the security patches, a few bug fixes for the SMF 2.0 line have also been included in the 2.0.6 patch.
Is there a more detailed changelog? It might be worth adding that to the announcement :)
Daniel15, former Customisation team member, resigned due to lack of time. I still love everyone here :D.
Go to smfshop.com for SMFshop support, do NOT email or PM me!

Arantor

We haven't changed how we do anything; we never give the full changelog here - because most people don't care - but the full changelog is on the download page as ever, including the full list of what was changed.

青山 素子

You might need to fix the files SMF uses to detect the updated version. Even though it's properly indicating a need for update, it's pointing to the 2.0.5 patch, not 2.0.6. Might also want to double-check for 1.1 as well.
Motoko-chan
Director, Simple Machines

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


Arantor


Burke ♞ Knight

Yet, when click to download, it does say 2.0.5...

This is via the link in package manager.

After the force refresh of files.

Arantor

"This patch file will provide security and bug fixes to your SMF 2.0.5 forum."

Well, yeah...

Advertisement: