Advertisement:

Author Topic: SMF 1.0.5 released  (Read 198459 times)

Offline Compuart

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 5,774
  • Gender: Male
  • Zéeeeal
    • RealityNet
SMF 1.0.5 released
« on: June 20, 2005, 12:48:40 PM »
Simple Machines is happy to release a new update to Simple Machines Forum 1.0. This release addresses a security issue in the most recent version of SMF.

As this is a critical release, you can easily upgrade by one of the following ways:
  • Use the package manager in your administration center - one click, and you're done.
  • Download the update archive file, and upload all of the files from it.
  • Download the modification file, attached to this message, and modify the files manually according to it.


This will most likely be the last release of the 1.0 line before we release SMF 1.1 Beta 3 Public. We do nevertheless encourage you to upgrade to 1.0.5 immediately, even if you mean to update to 1.1 Beta 3 Public when it is available.
« Last Edit: June 30, 2005, 06:03:21 AM by Grudge »
Hendrik Jan Visser
Former Lead Developer & Co-founder www.simplemachines.org
Personal Signature:
Realitynet.nl -> ExpeditieRobinson.net / PekingExpress.org / WieIsDeMol.Com

Offline Grek.Kamchatka

  • Full Member
  • ***
  • Posts: 590
  • Gender: Male
    • My World - My Soarer!
Re: SMF 1.0.5 released
« Reply #1 on: June 22, 2005, 11:02:04 PM »
Thq very mach!!!

Offline 1MileCrash

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 3,188
Re: SMF 1.0.5 released
« Reply #2 on: June 22, 2005, 11:05:13 PM »
holy crap. Another one?!
The only thing php can't do is tell you how much milk is left in the fridge.



Offline 1MileCrash

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 3,188
Re: SMF 1.0.5 released
« Reply #3 on: June 22, 2005, 11:06:17 PM »
wow. Updated already. That was even easier than the last.
The only thing php can't do is tell you how much milk is left in the fridge.



Offline codenaught

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 14,653
  • Gender: Male
  • Formerly Known As akabugeyes
Re: SMF 1.0.5 released
« Reply #4 on: June 22, 2005, 11:08:25 PM »
Yah, another release.  :)

Updated in a few seconds with the package manager.  :P
Dev Consultant
Former SMF Doc Coordinator

Offline ECCShaman09

  • Newbie
  • *
  • Posts: 4
Re: SMF 1.0.5 released
« Reply #5 on: June 22, 2005, 11:21:10 PM »
Take this upgrade seriously. I am using 1.0.4 and the security of the program was breached twice, messing up the board twice.

Thanks very much to the SMF team for addressing this serious problem. It's good to have a team that listens.

Offline forumite

  • Full Member
  • ***
  • Posts: 408
    • The RV Forum
Re: SMF 1.0.5 released
« Reply #6 on: June 22, 2005, 11:22:49 PM »
During my install of the patch, the Package Manager reported a failure with Search.php. Am I able to extract from a full 1.0.5 download and copy it to the Sources directory, overwriting the old file?

TIA

Offline Owdy

  • SMF Fossil
  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 15,596
  • Gender: Male
  • W00t!
    • janoloferiksson on LinkedIn
    • @@jaoler on Twitter
Re: SMF 1.0.5 released
« Reply #7 on: June 22, 2005, 11:24:00 PM »
Use upgrade package. Unpack, upload, run upgrade.php. You must install mods again after that. If you dont have any mods and you are using 1.0.4, then you can use update package.
« Last Edit: June 22, 2005, 11:25:36 PM by Owdy »
Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0

Offline forumite

  • Full Member
  • ***
  • Posts: 408
    • The RV Forum
Re: SMF 1.0.5 released
« Reply #8 on: June 22, 2005, 11:25:05 PM »
OK thanks for prompt response Owdy.

Offline Grek.Kamchatka

  • Full Member
  • ***
  • Posts: 590
  • Gender: Male
    • My World - My Soarer!
Re: SMF 1.0.5 released
« Reply #9 on: June 22, 2005, 11:27:16 PM »
The upgrader found some old or outdated files.

Please make certain you uploaded the new versions of all the files included in the package

What is this? I'm extract all the new files from archive to my smf directory and do upgrade.php =(

Offline dtm.exe

  • SMF Hero
  • ******
  • Posts: 5,465
Re: SMF 1.0.5 released
« Reply #10 on: June 22, 2005, 11:29:36 PM »
Great job, dev team :).

-Dan The Man

Offline [Unknown]

  • SMF Friend
  • SMF Master
  • *
  • Posts: 36,102
  • Gender: Male
Re: SMF 1.0.5 released
« Reply #11 on: June 22, 2005, 11:31:50 PM »
Take this upgrade seriously. I am using 1.0.4 and the security of the program was breached twice, messing up the board twice.

Thanks very much to the SMF team for addressing this serious problem. It's good to have a team that listens.

As I said before, this has nothing to do with SMF and instead indicates a problem in your server's configuration or in some other software you have installed.  While there was a security problem found, it COULD NOT have been used to give you the problems you experienced.

I strongly suggest you look into making sure your server is set up properly, using open_basedir and similar, and you have the latest versions of all other software installed, including PHP, Apache, MySQL, and mail server you might have, and other software.

-[Unknown]

Offline ECCShaman09

  • Newbie
  • *
  • Posts: 4
Re: SMF 1.0.5 released
« Reply #12 on: June 22, 2005, 11:38:54 PM »
Take this upgrade seriously. I am using 1.0.4 and the security of the program was breached twice, messing up the board twice.

Thanks very much to the SMF team for addressing this serious problem. It's good to have a team that listens.

As I said before, this has nothing to do with SMF and instead indicates a problem in your server's configuration or in some other software you have installed.  While there was a security problem found, it COULD NOT have been used to give you the problems you experienced.

I strongly suggest you look into making sure your server is set up properly, using open_basedir and similar, and you have the latest versions of all other software installed, including PHP, Apache, MySQL, and mail server you might have, and other software.

-[Unknown]

I am with one of the BIG server companies, not one of the fly by night services, and they have informed me that the server is patched and upgraded to current software versions. They are currently looking into the problem, from an inside and outside basis. I'll fill in the blanks as I learn more, no matter what direction it goes.

Offline wildcard

  • Semi-Newbie
  • *
  • Posts: 61
Re: SMF 1.0.5 released
« Reply #13 on: June 23, 2005, 12:08:44 AM »
Weird.  1.0.5 isn't showing up in my Package Manager.

And I get this message when I click on the "update your forum" link on the main Admin page.

"The package you are trying to download or install is either corrupt or not compatible with this version of SMF."

Any ideas?

Edit:  Nevermind.  I got it working fine through the "upload package" option.
« Last Edit: June 23, 2005, 12:32:04 AM by wildcard »

Offline catfished

  • Sr. Member
  • ****
  • Posts: 877
  • Gender: Male
  • pǝsnɟuoɔ ןןıʇs puɐ ʇɹıp uɐɥʇ ɹǝpןo
    • CatfishED.com
Re: SMF 1.0.5 released
« Reply #14 on: June 23, 2005, 12:26:39 AM »
Weird.  1.0.5 isn't showing up in my Package Manager.

And I get this message when I click on the "update your forum" link on the main Admin page.

"The package you are trying to download or install is either corrupt or not compatible with this version of SMF."

Any ideas?

I had the same problem clicking on the "update your forum link" but if you click on the "Package Manager" and then click on the link where it says "A security issue has been identified in SMF 1.0.4. You can install this patch (click here to install) to easily update yourself to the latest version" it works fine. I just updated 4 forums in 2 minutes.
« Last Edit: June 23, 2005, 12:36:57 AM by catfished »
You use and like this forum software? Then show your appreciation and support by becoming a Charter Member.



CatfishEd.com

Offline dtm.exe

  • SMF Hero
  • ******
  • Posts: 5,465
Re: SMF 1.0.5 released
« Reply #15 on: June 23, 2005, 12:35:34 AM »
I get this error when I try to upgrade.

Quote
The upgrader found some old or outdated files.

Please make certain you uploaded the new versions of all the files included in the package.

Click here to try again.

-Dan The Man

Offline XBleed

  • Semi-Newbie
  • *
  • Posts: 10
Re: SMF 1.0.5 released
« Reply #16 on: June 23, 2005, 12:48:18 AM »
I get this error when I try to upgrade.

Quote
The upgrader found some old or outdated files.

Please make certain you uploaded the new versions of all the files included in the package.

Click here to try again.

-Dan The Man

So do I...

It looks like the problem is when it checks the current SMF version.  I uploaded the files, attempted to run upgrade.php, and got that error.  My board still runs fine, and the copyright does say, "1.0.5"

Did it still upgrade, or is that the reason the error is showing up in the first place?

Offline [Unknown]

  • SMF Friend
  • SMF Master
  • *
  • Posts: 36,102
  • Gender: Male
Re: SMF 1.0.5 released
« Reply #17 on: June 23, 2005, 12:49:15 AM »
There's no need to run upgrade.php for this release.

-[Unknown]

Offline dtm.exe

  • SMF Hero
  • ******
  • Posts: 5,465
Re: SMF 1.0.5 released
« Reply #18 on: June 23, 2005, 12:52:17 AM »
There's no need to run upgrade.php for this release.

-[Unknown]

Oh, so can upgrade.php be removed from the archive altogether, so as to not confuse people, or is it needed for upgrades before SMF 1.0.4?

-Dan The Man

Offline XBleed

  • Semi-Newbie
  • *
  • Posts: 10
Re: SMF 1.0.5 released
« Reply #19 on: June 23, 2005, 12:53:10 AM »
There's no need to run upgrade.php for this release.

-[Unknown]
Good to know.

Thanks for the update, SMF.