SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5

Started by Norv, February 11, 2011, 03:16:35 PM

Previous topic - Next topic

Norv

Greetings,

Simple Machines announces the immediate public release of SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 RC5.

This version is a security release, and it is strongly advised that all users upgrade to this release as it contains a few security and privacy fixes in both SMF 2.0 and SMF 1.1.

At this time, legal matters related to the upcoming license changes have prevented us from making a final release of SMF 2.0. While 2.0 RC4 has proved to be relatively stable, there have been several issues found and fixed since its release. Therfore, it has been deemed prudent to make another release candidate available for testing.

The 2.0 RC5 fixes are beneficial and recommended. However as the upgrade process is a hassle for some administrators a security-only patch for RC4 is also being made available. This patch only contains the security fixes, for admins who wish to secure their RC4 forum but may not want to do a complete upgrade. It is a simple package that can be installed quickly via the SMF package manager and should not break any existing RC4 themes and mods.
Please find this patch here: SMF 2.0 RC4 Security Patch.

We believe 2.0 RC5 to be free of significant problems. It should be given the same treatment as any other Release Candidate, and will be subjected to continued testing.

Main points of this 2.0 release include:
Several security-related fixes.
Mail management fixed.
Issues with international forums characters.
Unread replies and topics core functionalities issues were fixed.
A few administration features issues were fixed.
New integration hooks features introduced in RC4 were fixed.
Many other fixes and improvements.

The changelog is available on the usual downloads page: http://download.simplemachines.org/

Please do not use this topic for support requests. You will get a much quicker and better response by posting in the relevant support board.

Regards,

Simple Machines
To-do lists are for deferral. The more things you write down the later they're done... until you have 100s of lists of things you don't do.

File a security report | Developers' Blog | Bug Tracker


Also known as Norv on D* | Norv N. on G+ | Norv on Github

Looking

Thanks for fixing those.

What legal issues with 2.0? Will SMF still be free?


CountryLady

Thanks for this, especially the explanation regarding the delay in SMF 2 going Gold.

Communication is a wonderful thing. :)

Again Thank You, ALL~!


Antes


Norv

To-do lists are for deferral. The more things you write down the later they're done... until you have 100s of lists of things you don't do.

File a security report | Developers' Blog | Bug Tracker


Also known as Norv on D* | Norv N. on G+ | Norv on Github

Owdy

Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0


sonficyus

Thank you for everything.

Too beatiful.

Innbound

QuoteAn Error Has Occurred!
The package you are trying to download or install is either corrupt or not compatible with this version of SMF.

  Attempted to upgrade from within the Administration Center in v 1.1.12 (a fairly vanilla install might I add).

JBlaze

This topic is not to be used for support. Please post in your appropriate boards.
Jason Clemons
Former Team Member 2009 - 2012

sharks

I just saw this update when visiting the admin panel in my forum and when i checked here, no announcement had yet been made. :)

I don't understand why a change in licence is preventing the release of 2.0 final. Shouldn't a change in licence be able to be made quickly and easily if properly planned in advance? 5 years and 2.0 final is still baking... Honestly, i think it's just a clever way for the developers to say that the final version is not yet ready! Packing my non-existent admin hopes until 2012! LOL

But i greatly appreciate the efforts put into the fixes. I will definitely upgrade to 1.1.13 but i don't know if a 2.0 RC6 might be out later on, given the very unusual trend on SMF, so i'll just stick to my RC4 to avoid unnecessary work in re-installing all my modifications, manual edits and themes. With such a huge amount of time (as my brother made 2 kids in that same development time. LOL) i can only hope (for the sake of this software's reputation!) that when 2.0 gold is finally out, it won't be too buggy, if at all.


Innbound

Quote from: JBlaze on February 11, 2011, 03:57:07 PM
This topic is not to be used for support. Please post in your appropriate boards.
Not asking for support nor am I expecting it. I've been using SMF since 2005 and I've posted 5 times, total. Do you still feel like upping you count to more over 10,000 posts by stating the obvious? 

sharks

Quote from: Innbound on February 11, 2011, 04:06:25 PM
Quote from: JBlaze on February 11, 2011, 03:57:07 PM
This topic is not to be used for support. Please post in your appropriate boards.
Not asking for support nor am I expecting it. I've been using SMF since 2005 and I've posted 5 times, total. Do you still feel like upping you count to more over 10,000 posts by stating the obvious? 
LOL. I think JBlaze might have misread your post. Or maybe not. :D

enik


JBlaze

@Innbound, I was replying to sonficyus's post, not yours, and it's also a general reminder that no support will be given in this topic.
Jason Clemons
Former Team Member 2009 - 2012

Yağız...


NanoSector

So umm where do I find the security patch?

Do not feel like taking the hassle of upgrading after almost killing Firefox and QuickTime...
My Mods / Mod Builder - A tool to easily create mods / Blog
"I've heard from a reliable source that the Answer is 42. But, still no word on what the question is."

Advertisement: