Advertisement:

Author Topic: SMF 1.0.10 Release  (Read 54691 times)

Offline Grudge

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,742
  • Gender: Male
  • Unofficial nuisance
SMF 1.0.10 Release
« on: December 16, 2006, 08:55:37 AM »
Following a security report from Jessica Hope/rotwang Simple Machines is happy to release a patch for all users still running SMF 1.0.9. This patch can be installed directly from your admin center by visiting the package manager. We would urge all users of SMF 1.0.9 and below to upgrade to SMF 1.1.1 but we will continue to patch the SMF 1.0 line as required.

Note: This patch is only for users of SMF 1.0.x - any user running any version from the 1.1 line should visit this topic

Users who would like to download the full SMF 1.0.10 package can find it on the archive page.

Thanks,

Simple Machines
« Last Edit: December 18, 2006, 06:08:30 AM by Grudge »
I'm only a half geek really...

Offline Bernak

  • Newbie
  • *
  • Posts: 7
Re: SMF 1.0.10 Release
« Reply #1 on: December 18, 2006, 10:11:35 AM »
Thanks for the update!
Because an incompatibility issue I can't upgrade to 1.1 ....  :-\
Thanks for keeping the 1.0 versions with the important security updates! :)

Offline Zenigata

  • Jr. Member
  • **
  • Posts: 237
  • Gender: Male
    • Il sito di Zenigata
Re: SMF 1.0.10 Release
« Reply #2 on: December 18, 2006, 11:07:19 AM »
It works. Thanks.

Offline Ohmer

  • Semi-Newbie
  • *
  • Posts: 55
  • Gender: Male
  • d'ho !
Re: SMF 1.0.10 Release
« Reply #3 on: December 18, 2006, 05:33:11 PM »
Thanks for the backport !

adamkemp

  • Guest
Re: SMF 1.0.10 Release
« Reply #4 on: December 19, 2006, 01:12:15 AM »
How can I patch a modded forum safely? I can only find packages which will completely overwrite existing files. Is there a diff I can use?

Offline Dannii

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,210
  • Mind the volcano!
    • curiousdannii on GitHub
Re: SMF 1.0.10 Release
« Reply #5 on: December 19, 2006, 02:37:11 AM »
You can use the attachment in the first post.
"Never imagine yourself not to be otherwise than what it might appear to others that what you were or might have been was not otherwise than what you had been would have appeared to them to be otherwise."

Offline Daniel15

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 4,222
  • Gender: Male
  • http://dan.cx/
    • daaniel on Facebook
    • Daniel15 on GitHub
    • daniel15 on LinkedIn
    • @Daniel15 on Twitter
    • Daniel15
Re: SMF 1.0.10 Release
« Reply #6 on: December 19, 2006, 03:49:54 AM »
Quote
How can I patch a modded forum safely? I can only find packages which will completely overwrite existing files. Is there a diff I can use?
As eldacar said, you can install it via the Package Manager in your SMF admin panel. I believe it will tell you there's an update, but if it doesn't, upload the file attached to the first post (under 'Upload Package')

EDIT: There's a spelling error in a comment, by the way:
Quote
// Do we have a mime type we can simpy use?
:P
« Last Edit: December 19, 2006, 04:01:23 AM by Daniel15 »
Daniel15, former Customisation team member, resigned due to lack of time. I still love everyone here :D.
Go to smfshop.com for SMFshop support, do NOT email or PM me!

Offline Insight

  • Semi-Newbie
  • *
  • Posts: 45
  • Gender: Male
    • James Wheeler Photography
Re: SMF 1.0.10 Release
« Reply #7 on: December 19, 2006, 06:30:27 AM »
I have downloaded it quite a few times now with av on and off and winrar is telling me the files within it are corrupt.

They look alright when I view them, any ideas?

Offline Dannii

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,210
  • Mind the volcano!
    • curiousdannii on GitHub
Re: SMF 1.0.10 Release
« Reply #8 on: December 19, 2006, 06:48:14 AM »
What matters isn't whether winrar thinks they're corrupt (and it's a silly program anyways) but whether the server does. Can you install them?
"Never imagine yourself not to be otherwise than what it might appear to others that what you were or might have been was not otherwise than what you had been would have appeared to them to be otherwise."

Offline Insight

  • Semi-Newbie
  • *
  • Posts: 45
  • Gender: Male
    • James Wheeler Photography
Re: SMF 1.0.10 Release
« Reply #9 on: December 19, 2006, 06:49:50 AM »
I'll give it a try ...

yup worked, thanks :)
« Last Edit: December 19, 2006, 06:52:44 AM by Insight »

adamkemp

  • Guest
Re: SMF 1.0.10 Release
« Reply #10 on: December 21, 2006, 02:29:56 AM »
I'm sorry, I didn't see the attachment. I'll try it.

Thanks.

Offline KGIII

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,293
  • Gender: Male
  • If you can build it, I can wreck it.
    • Web Hosting
Re: SMF 1.0.10 Release
« Reply #11 on: December 21, 2006, 02:47:32 AM »
We would urge all users of SMF 1.0.9 and below to upgrade to SMF 1.1.1 but we will continue to patch the SMF 1.0 line as required.

I can't seem to find a clear answer anywhere. I may have missed it or my search terms just might not have matched it to decent content. I have three clients whom, for reasons of their own, simply can't upgrade at this time. As this is a shared server environment and, frankly, one that my employees and myself are ultimately accountable for we have a policy that disallows insecure code on the system - within reason.

I'm not too concerned, and surely not concerned yet, but there's going to come a time when you can't really support old code I suspect. No matter how ideal, no matter how important, it simply seems to be unrealistic to expect you to. (Thanks for doing it for however long you can and do do it.)

Is there a set date or condition as to when support for the older version will expire? I have read everything from "for as long as we can" to "forever" I believe. The first is not very specific and the second is probably impossible.

I don't ask to be a pain... Reall... Well not to be a pain to you guys... Instead I ask so that I can poke and prod them into upgrading their themes to 1.1 and moving along or at least tell them when we'll have to insist that they do. As much as we'd like to be idealists and say, "It is your space, do with it as you will" there are more and more laws coming into play as well as more and more people looking for legal accountability and in a shared server environment vulnerabilities are best squished when found.
My PC Support Forum
Please ask in-thread before PMing
                   SMF Help
                   Visit My Blog

How can we improve the support process?:
http://www.simplemachines.org/community/index.php?topic=163533.0

SMF vs. Godzilla? Who do you think will win?

Offline Daniel15

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 4,222
  • Gender: Male
  • http://dan.cx/
    • daaniel on Facebook
    • Daniel15 on GitHub
    • daniel15 on LinkedIn
    • @Daniel15 on Twitter
    • Daniel15
Re: SMF 1.0.10 Release
« Reply #12 on: December 21, 2006, 04:31:38 AM »
Quote
Is there a set date or condition as to when support for the older version will expire?
I'd take a guess and say it will be supported until the next major version of SMF (1.2? 2.0?) comes out. This is only a guess though, don't take my word on it ;)
Daniel15, former Customisation team member, resigned due to lack of time. I still love everyone here :D.
Go to smfshop.com for SMFshop support, do NOT email or PM me!

Offline KGIII

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,293
  • Gender: Male
  • If you can build it, I can wreck it.
    • Web Hosting
Re: SMF 1.0.10 Release
« Reply #13 on: December 21, 2006, 04:48:21 AM »
Quote
Is there a set date or condition as to when support for the older version will expire?
I'd take a guess and say it will be supported until the next major version of SMF (1.2? 2.0?) comes out. This is only a guess though, don't take my word on it ;)

LOL That's what I'd "guessed" as well but hadn't any hard or fast evidence to support it. 1.0.10 rolling down the pipes didn't help my case much but I think they understand that eventually they WILL have to upgrade for security reasons. I won't delve into it here but, well, why is it people will maintain a car but when it comes to an operating system, security application, or even software that they use for their site that folks are so inclined to say, "I have what I need, I won't go past here?" *sighs*

That's a whole other thread entirely though. One more suited for the chit chat section but thanks for at least confirming that another person thinks the same things I was thinking. Though momentum suggests that next version is going to roll down the pipes faster than 1.1 did. ;)
My PC Support Forum
Please ask in-thread before PMing
                   SMF Help
                   Visit My Blog

How can we improve the support process?:
http://www.simplemachines.org/community/index.php?topic=163533.0

SMF vs. Godzilla? Who do you think will win?

Offline Dannii

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,210
  • Mind the volcano!
    • curiousdannii on GitHub
Re: SMF 1.0.10 Release
« Reply #14 on: December 21, 2006, 06:22:43 AM »
Also - we should be supporting 1.0 with security patches indefinetely IMHO. There's no great need not to IMHO.
« Last Edit: December 21, 2006, 11:23:56 PM by eldʌkaː »
"Never imagine yourself not to be otherwise than what it might appear to others that what you were or might have been was not otherwise than what you had been would have appeared to them to be otherwise."

Offline KGIII

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,293
  • Gender: Male
  • If you can build it, I can wreck it.
    • Web Hosting
Re: SMF 1.0.10 Release
« Reply #15 on: December 21, 2006, 07:53:49 AM »
Also - we should be supporting 1.0 with security patches indefinetely IMHO. There's no great need not to IMHO.

If SMF does do that and sustains it they'll be the first and only. I'll give kudos where they're due and so my expectation is that, if there is any team capable or willing? It'd be this one. On the other hand, it seems unlikely and unrealistic but what the heck? I'll root for you. :)
« Last Edit: December 21, 2006, 11:23:41 PM by eldʌkaː »
My PC Support Forum
Please ask in-thread before PMing
                   SMF Help
                   Visit My Blog

How can we improve the support process?:
http://www.simplemachines.org/community/index.php?topic=163533.0

SMF vs. Godzilla? Who do you think will win?

Offline Vinspire

  • Sr. Member
  • ****
  • Posts: 852
  • Gender: Male
    • The Box Of Heart Forum
Re: SMF 1.0.10 Release
« Reply #16 on: December 21, 2006, 10:05:57 PM »
Is this the patch I need to use for RC 3 ?

Offline Dannii

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,210
  • Mind the volcano!
    • curiousdannii on GitHub
Re: SMF 1.0.10 Release
« Reply #17 on: December 21, 2006, 11:24:11 PM »
No, this is for 1.0.9 ONLY.
"Never imagine yourself not to be otherwise than what it might appear to others that what you were or might have been was not otherwise than what you had been would have appeared to them to be otherwise."

Offline Vinspire

  • Sr. Member
  • ****
  • Posts: 852
  • Gender: Male
    • The Box Of Heart Forum
Re: SMF 1.0.10 Release
« Reply #18 on: December 22, 2006, 12:00:43 AM »
No, this is for 1.0.9 ONLY.

Then how do i patch it up if i am using 1.1 RC 3 ? :)

Offline Dannii

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,210
  • Mind the volcano!
    • curiousdannii on GitHub
Re: SMF 1.0.10 Release
« Reply #19 on: December 22, 2006, 12:09:53 AM »
Go to the download page, and use the 'Large Upgrade' package, or just use the Webinstaller. That will take you to 1.1.1.
"Never imagine yourself not to be otherwise than what it might appear to others that what you were or might have been was not otherwise than what you had been would have appeared to them to be otherwise."