Advertisement:

Author Topic: SMF 2.0.1 and 1.1.15 critical security patches released  (Read 2508589 times)

Offline maximumrock

  • Jr. Member
  • **
  • Posts: 124
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #80 on: September 21, 2011, 02:46:50 PM »
i have version SMF 2.0 RC5 .. does this critical security patch apply to my forum?

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #81 on: September 21, 2011, 02:57:04 PM »
i have version SMF 2.0 RC5 .. does this critical security patch apply to my forum?

Yes, it does. I strongly recommend to upgrade to 2.0.1. You will need to make a large upgrade, since from RC5 to 2.0 there is no patch, only from 2.0 to 2.0.1 your forum can be upgraded with the patch. Please note that there are security weaknesses addressed in 2.0 as well, so I really recommend that you upgrade your forum, when possible.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline maximumrock

  • Jr. Member
  • **
  • Posts: 124
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #82 on: September 21, 2011, 02:58:59 PM »
i have version SMF 2.0 RC5 .. does this critical security patch apply to my forum?

Yes, it does. I strongly recommend to upgrade to 2.0.1. You will need to make a large upgrade, since from RC5 to 2.0 there is no patch, only from 2.0 to 2.0.1 your forum can be upgraded with the patch. Please note that there are security weaknesses addressed in 2.0 as well, so I really recommend that you upgrade your forum, when possible.

Thanks! Is there a preferred way of doing this? All i have to do is apply this patch and it is upgrade or do i have to upgrade to new version from download page first.. thx again

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,429
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #83 on: September 21, 2011, 03:03:30 PM »
There is no patch file for any RC version. If you are running any RC version,,you must use the "large upgrade" pack and replace all of the files.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline maximumrock

  • Jr. Member
  • **
  • Posts: 124
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #84 on: September 21, 2011, 03:05:18 PM »
There is no patch file for any RC version. If you are running any RC version,,you must use the "large upgrade" pack and replace all of the files.

ohhhh ok.. thanks...thats what i have --> SMF 2.0 RC5

is there a tutorial on the easiest way to upgrade the forum without messing it up?

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 51,133
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #85 on: September 21, 2011, 03:06:36 PM »
take a look at Upgrading SMF and if you have further questions please open a separate thread in the proper board.

Offline maximumrock

  • Jr. Member
  • **
  • Posts: 124
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #86 on: September 21, 2011, 03:09:24 PM »
take a look at Upgrading SMF and if you have further questions please open a separate thread in the proper board.

will do! thanks! but upgrading for my version is recommended even though the patch isnt for mine?

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 51,133
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #87 on: September 21, 2011, 03:12:58 PM »
yes you need to upgrade to latest version so you will have the security issues since your version was released patched. once you upgrade to 2.0.1 you do NOT need to install the patch.

Offline Jntg4

  • Jr. Member
  • **
  • Posts: 151
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #88 on: September 21, 2011, 03:33:29 PM »
Was the 1.0 branch updated or not this time?  I'm assuming there is no update to apply to it, right?
Free Domain Name: http://www.co.cc/?id=167358

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 51,133
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #89 on: September 21, 2011, 03:36:44 PM »
if a version is affected by the security issue a patch will be issued otherwise they are not affected by the issue.

Offline newtoallthis

  • Jr. Member
  • **
  • Posts: 166
  • Gender: Male
  • Searching For The Light
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #90 on: September 21, 2011, 03:50:32 PM »
Added to main and test forums via Package Manager apparently without a hitch.

Thanks to the SMF developers for their hard work.  8)
SMF 2.0.11
Simple Portal 2.3.3
Aeva Media 1.4c
MediaWiki 1.24.0

Offline floridaflatlander

  • Jr. Member
  • **
  • Posts: 345
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #91 on: September 21, 2011, 04:44:59 PM »
Thanks

Offline JeffG1

  • Newbie
  • *
  • Posts: 4
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #92 on: September 21, 2011, 05:02:24 PM »
Thanks. My forum was upgraded instantaneously (so it seemed) to 2.0.1 with a couple of clicks. I notice you haven't upgraded your own forum yet.  ;D

Offline MarkRH

  • Semi-Newbie
  • *
  • Posts: 75
  • Gender: Male
    • @mrheadrick on Twitter
    • Mark Headrick's Web Site
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #93 on: September 21, 2011, 05:06:22 PM »
Saw the notice in the 2.0 Admin Center. Backed up database and files, clicked the update link, all is well.

Thanks :)
Mark H.
Pelicar Fantasy RPG Forum using SMF 2.1 RC 2 Now (Also testing 2.1 RC 2 locally)

Offline mextremex

  • Newbie
  • *
  • Posts: 9
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #94 on: September 21, 2011, 06:52:34 PM »
thanks for hte updates SMF  best script ever _)

Offline ntr2ntr

  • Semi-Newbie
  • *
  • Posts: 49
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #95 on: September 21, 2011, 07:02:34 PM »
Thanks a lot SMF, you have been so great u guys rockkk

Offline Study Force

  • SMF Hero
  • ******
  • Posts: 3,703
    • StudyForcePS on Facebook
    • @studyforceps on Twitter
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #96 on: September 21, 2011, 07:54:14 PM »
Sorry, what exactly does it change?

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 51,133
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #97 on: September 21, 2011, 09:30:21 PM »
some security issues are fixed which is stated in the first post of this thread.

Offline Stormfront

  • Semi-Newbie
  • *
  • Posts: 79
  • Gender: Male
    • Българският националистически форум
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #98 on: September 21, 2011, 09:41:29 PM »
Thank you.  :)
Bulgarian nationalist forum http://www.forum.bg-nacionalisti.org/index.php SMF 2.0.1 Final

Offline Account Abandoned

  • Full Member
  • ***
  • Posts: 512
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #99 on: September 21, 2011, 09:46:04 PM »
LOL I just got the email for this today :P