Advertisement:

Author Topic: SMF 2.0.1 and 1.1.15 critical security patches released  (Read 2506970 times)

Offline knagl

  • Semi-Newbie
  • *
  • Posts: 28
  • Gender: Male
    • Las Vegas Advice Message Forum
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #100 on: September 21, 2011, 10:07:05 PM »
Thank you for releasing a 1.1.x patch as well.  :)

Offline ahrasis

  • SMF Hero
  • ******
  • Posts: 4,921
  • Gender: Male
  • Busy mode is on.
    • ahrasis on GitHub
    • ahrasis on LinkedIn
    • ElkArte Malaysia
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #101 on: September 21, 2011, 10:10:18 PM »
If it is just a patch, can we have the patch in form of a mod. It is no point upgrading the version number since it will affect others such as the mod installation as well as removal. I believe we have done this before where back in RC4. Just a point to ponder.

Offline 青山 素子

  • Server Team
  • SMF Super Hero
  • *
  • Posts: 17,066
  • 戦場ヶ原、蕩れ!
    • srvrguy on GitHub
    • @motokochan on Twitter
    • Nekomusume Moe
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #102 on: September 21, 2011, 11:16:55 PM »
If it is just a patch, can we have the patch in form of a mod. It is no point upgrading the version number since it will affect others such as the mod installation as well as removal. I believe we have done this before where back in RC4. Just a point to ponder.

That's already the case for 2.0 to 2.0.1 and 1.1.14 to 1.1.15. There has never been an actual package manager upgrade for pre-release (beta and rc versions). The only package manager items for pre-releases were for critical security issues where a version bump would not be called for.
Motoko-chan
Director, Simple Machines

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


Offline ahrasis

  • SMF Hero
  • ******
  • Posts: 4,921
  • Gender: Male
  • Busy mode is on.
    • ahrasis on GitHub
    • ahrasis on LinkedIn
    • ElkArte Malaysia
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #103 on: September 22, 2011, 01:52:35 AM »
I don't quite understand. Can you explain why we need to download the whole package again, when the security patches could be just a small mod to patch current 2.0 package without changing its version to 2.0.1?

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 50,745
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #104 on: September 22, 2011, 05:52:03 AM »
the patch contains the same updated code as the normal upgrade packages, it just depends on any issues you face in the upgrade which will work for you at this point, you do NOT need to use the large upgrade package if you are running 2.0 or 1.1.14.

Online Gazmanafc

  • Sorceress's Knight
  • Customizer
  • SMF Super Hero
  • *
  • Posts: 17,992
  • Gender: Male
  • So this is the luck of the draw...
    • Gazmanafc on Facebook
    • garygadsdon on LinkedIn
    • @Gazmanafc on Twitter
    • The Bongo Comics Fan Forum
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #105 on: September 22, 2011, 07:07:49 AM »
you do NOT need to use the large upgrade package if you are running 2.0 or 1.1.14.
Unless of course you're gonna go from 1.1.14 to 2.0.1 :P
Gary M. Gadsdon
Do NOT PM me unless I say so

War of the Simpsons
Bongo Comics Fan Forum
Youtube Let's Plays

^ YT is changing monetisation policy, help reach 1000 sub threshold.

Online Aleksi "Lex" Kilpinen

  • A Peculiar Finn
  • Lead Support Specialist
  • SMF Super Hero
  • *
  • Posts: 18,192
  • Gender: Male
  • Don't worry, I'm n00b friendly
    • Aleksi.Kilpinen on Facebook
    • LexArma on GitHub
    • aleksi-kilpinen on LinkedIn
    • There's No Place Like 127.0.0.1
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #106 on: September 22, 2011, 07:38:37 AM »
I don't quite understand. Can you explain why we need to download the whole package again, when the security patches could be just a small mod to patch current 2.0 package without changing its version to 2.0.1?
Like always with 1.1 and 1.0 - you can now update 2.0 through the admin panel, following the link in the notification.

Or, you can grab a package manager update from here http://custom.simplemachines.org/upgrades/
A Finnish Support Specialist
 Happily running multiple SMF 2.0 installations.

How you can help SMF

"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum.
 Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

Offline espy

  • Newbie
  • *
  • Posts: 1
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #107 on: September 22, 2011, 12:08:59 PM »
Thanks for the released patches.

Offline rocknroller

  • SMF Hero
  • ******
  • Posts: 1,594
  • Gender: Male
  • Justice has been served!
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #108 on: September 22, 2011, 02:23:34 PM »
thanks for update  :)

Offline bayette

  • Newbie
  • *
  • Posts: 1
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #109 on: September 22, 2011, 03:07:14 PM »
Une simplicité enfantine la mise à jour : bravo !! :)

Offline Akule

  • Newbie
  • *
  • Posts: 1
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #110 on: September 22, 2011, 05:53:47 PM »
May I have the changelog of 1.1.15 ?

try looking? The 1.1.15 changelog is in the list
http://download.simplemachines.org/index.php?thanks;filename=smf_1-1-15_changelog.txt

Wow. You're abrasive to new users. Customer service refresher seems to be needed for the marketing guy? Oh, and It's not.


img26.imageshack.us/img26/8153/smfdownloads13167271363.png/
(I would have it automatically link to an image proving such, but...add http:// )

Basically, from the link provided in the beginning of the thread to download.simplemachines.org/, the only changelog that is listed for us, mere end users, is SMF 2.0.1. For that matter, the only download listed on that page is 2.0.1. There isn't a link at all at the beginning of this thread to SMF 1.1.15's update.

Now, if I go to Package Manager Updates -> SMF 1.1.14 to SMF 1.1.15, then I can see what the file edits are, but not the changelog. For the changelog, I have to go to Archived Releases, where I can see every update since the beginning, which is not new user friendly.

For new users, I would recommend: download.simplemachines.org/?archive;version=64 (add http:// ), where you can see everything for SMF 1.1.15.

Is there a way we can get a link for the SMF 1.1.15 files on the first post in this thread? I imagine you'll get tired of constantly telling some people where to go when they skip to the end of the thread to post their request for the files and the changelog.
« Last Edit: September 22, 2011, 06:34:50 PM by Akule »

Offline lelynx

  • Newbie
  • *
  • Posts: 5
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #111 on: September 23, 2011, 12:12:59 AM »
after upgraded to 1.1.15, i'm getting this message at the bottom of my page

Sorry, the copyright must be in the template.
Please notify this forum's administrator that this site is missing the copyright message for SMF so they can rectify the situation. Display of copyright is a legal requirement. For more information on this please visit the Simple Machines website.

any idea how/where to add in the copyright?
thanks

Offline Ricky.

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 4,057
    • Indian Linux Forums
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #112 on: September 23, 2011, 12:27:07 AM »
Somehow your template got messed,

Add theme_copyright() somewhere in your index.template.php  and you should be fine.

Offline lelynx

  • Newbie
  • *
  • Posts: 5
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #113 on: September 23, 2011, 02:14:06 AM »
The theme_copyright() is there at my code before the upgrade.
Extracted from my index.template.php.
Any idea what's wrong here? Syntax error?

// Show the "Powered by" and "Valid" logos, as well as the copyright. Remember, the copyright must be somewhere!
   echo '<div style="white-space: nowrap; padding: 10px; text-align: center;" class="smalltext">
                                        ', theme_copyright(), ' <br />
               <a href="hxxp:validator.w3.org/check/referer [nonactive]" target="_blank">XHTML</a> |
               <a href="hxxp:jigsaw.w3.org/css-validator/check/referer [nonactive]" target="_blank">CSS</a> |
               <b>', $context['mycolor']=='_terra' ? 'Terra97' : 'Aero79' ,'</b> design by <a href="hxxp:www.tinyportal.net [nonactive]" target="_blank">Bloc</a>';


Online Aleksi "Lex" Kilpinen

  • A Peculiar Finn
  • Lead Support Specialist
  • SMF Super Hero
  • *
  • Posts: 18,192
  • Gender: Male
  • Don't worry, I'm n00b friendly
    • Aleksi.Kilpinen on Facebook
    • LexArma on GitHub
    • aleksi-kilpinen on LinkedIn
    • There's No Place Like 127.0.0.1
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #114 on: September 23, 2011, 02:17:23 AM »
If you are using an alternative language, make sure to test with english - and see if the error goes away.
If it does, then the problem is with your language pack.
A Finnish Support Specialist
 Happily running multiple SMF 2.0 installations.

How you can help SMF

"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum.
 Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

Offline lelynx

  • Newbie
  • *
  • Posts: 5
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #115 on: September 23, 2011, 02:40:45 AM »
i'm using normal english as the language pack
anymore idea?

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 50,745
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #116 on: September 23, 2011, 05:40:28 AM »
please start a thread in the proper support board, this thread is not for support.

Offline MotRude

  • Semi-Newbie
  • *
  • Posts: 95
    • @@cruetube on Twitter
    • CrüeTube
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #117 on: September 23, 2011, 02:55:28 PM »
Is this an easy install to the 2.0? I Do not wan't to have to install all my mods over again.

Offline Ventic

  • Full Member
  • ***
  • Posts: 635
  • Gender: Male
    • vasilis.koukoutis on Facebook
    • @joyspotorg on Twitter
    • JoySpot
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #118 on: September 23, 2011, 03:01:05 PM »
Is this an easy install to the 2.0? I Do not wan't to have to install all my mods over again.
well i got an idea,since when i was trying to upgrade via the package i saw that i can see the changes that have been made.so i cant change those 5-6 files manually too?
it will work or not

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,161
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.1 and 1.1.15 critical security patches released
« Reply #119 on: September 23, 2011, 03:10:02 PM »
Ventic,

You can either use the upgrade archive file and lose all your mods or use the package manager update and keep all your mods.  Your choice.

If you want to manually apply the updates, then download the package manager update, extract the XML and read through that for instructions on what files and code to manually update.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.