Advertisement:

Author Topic: SMF 2.0.2 and 1.1.16 critical security patches released  (Read 1448858 times)

kat

  • Guest
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #180 on: June 21, 2012, 05:01:22 AM »

The first part of my response was concerning K@ directing users to use the update archive as a package manager package, which will not work.

Actually, updates do (At least, they always have, for me). UpGRADES don't.

i went to browse packagse, it was there, i clicked on it and it installed fine...

WoOt!

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 57,355
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #181 on: June 21, 2012, 08:53:36 AM »
why would there be a 2.0.3 or 1.1.17 if there are no security issues to patch?
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Antes

  • Evil Black Cat
  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,765
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @XinYenFon on Twitter
    • Lunarfall
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #182 on: June 21, 2012, 06:57:10 PM »
why would there be a 2.0.3 or 1.1.17 if there are no security issues to patch?

So you prefer saying we fixed that glitch/bug whatever but included in next big version? If you fixed some bugs in 2.0.x circle you have to make new release. If I'm not wrong there is already 33 bugs (public) resolved/closed. Its enough to release another update.
In Catnip We Trust.
Solution is Catnip!
Vote for Catnip!

Current Project(s): [ Lunarfall ]
Past Project(s): [ ezPortal ]

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 69,626
    • StoryBB/StoryBB on GitHub
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #183 on: June 21, 2012, 07:05:20 PM »
That isn't how it works, that's never been how it works in the 9 year history of SMF.

Once a x.y.0 release is made (like 2.0.0), the ONLY things fixed after are security fixes. There have been no security issues fixed, ergo no new release.

It isn't about whether you'd 'prefer' it or not, it's how SMF development operates - keeping life easier for users and admins to manage upgrades.

You see, by that logic, you could release a new patch every single bug fix, which means we'd be up to 2.0.34 by now - and no-one needs that.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Antes

  • Evil Black Cat
  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,765
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @XinYenFon on Twitter
    • Lunarfall
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #184 on: June 21, 2012, 07:50:03 PM »
Things can be changed nothing stands against it.

I didn't say release new update after every single bug/glitch fix. I said X is a good number to release update.

Living with "bugs" never made users life easier.

Beside all I'm completely happy with no-new release (that means there is no security issue in software)
In Catnip We Trust.
Solution is Catnip!
Vote for Catnip!

Current Project(s): [ Lunarfall ]
Past Project(s): [ ezPortal ]

Offline 青山 素子

  • Server Team
  • SMF Super Hero
  • *
  • Posts: 17,051
  • 戦場ヶ原、蕩れ!
    • srvrguy on GitHub
    • @motokochan on Twitter
    • Nekomusume Moe
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #185 on: June 22, 2012, 01:41:00 AM »
I didn't say release new update after every single bug/glitch fix. I said X is a good number to release update.

Living with "bugs" never made users life easier.

It depends on the bug and how bad it is. Also, if the fixes have been done in a new branch and a lot of code has changed, it may be difficult to backport the fix. Often, in cases like that, it's better to leave the bug in place. Sometimes the actual fix for the bug requires a re-write of code, which may have side-effects in other parts of SMF, especially older code.

Traditionally, updates in a stable release have only been made for security issues or major bugs.
Motoko-chan
Director, Simple Machines

Just because it's pouring down doesn't mean we're gonna drown. There's a time when all you can say is let it rain - Mat Kearney (Let It Rain)

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


Offline Antes

  • Evil Black Cat
  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,765
  • Gender: Male
  • Black cat rulz!
    • Antes on GitHub
    • merta on LinkedIn
    • @XinYenFon on Twitter
    • Lunarfall
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #186 on: June 22, 2012, 05:58:37 AM »
I didn't say release new update after every single bug/glitch fix. I said X is a good number to release update.

Living with "bugs" never made users life easier.

It depends on the bug and how bad it is. Also, if the fixes have been done in a new branch and a lot of code has changed, it may be difficult to backport the fix. Often, in cases like that, it's better to leave the bug in place. Sometimes the actual fix for the bug requires a re-write of code, which may have side-effects in other parts of SMF, especially older code.

Traditionally, updates in a stable release have only been made for security issues or major bugs.

Oh now i understand thanks for the info.
In Catnip We Trust.
Solution is Catnip!
Vote for Catnip!

Current Project(s): [ Lunarfall ]
Past Project(s): [ ezPortal ]

Offline searchgr

  • Sophist Member
  • *****
  • Posts: 1,247
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #187 on: July 08, 2012, 03:53:07 PM »
Quote
No updates for the last 6 months. This is very disappointing. What's going on?
No need for (security) updates for a long time. This is very positive!

Aha! And what about new features?

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 69,626
    • StoryBB/StoryBB on GitHub
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #188 on: July 08, 2012, 04:02:37 PM »
As has always been the case with SMF, once a stable release (1.0.0, 1.1.0, 2.0.0) is reached, no new features are added until the next one and only security patches get released, which is what 2.0.1 and 2.0.2 were. The next release with new features will be 2.1 and is still under development.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline searchgr

  • Sophist Member
  • *****
  • Posts: 1,247
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #189 on: July 08, 2012, 05:03:57 PM »
Thank you Arantor.

Offline NBK*Twitch

  • Full Member
  • ***
  • Posts: 690
  • Gender: Male
    • Twitch's World
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #190 on: July 21, 2012, 09:08:34 PM »
As has always been the case with SMF, once a stable release (1.0.0, 1.1.0, 2.0.0) is reached, no new features are added until the next one and only security patches get released, which is what 2.0.1 and 2.0.2 were. The next release with new features will be 2.1 and is still under development.


Bug Fixes are released in small updates like 2.0.2 last time I checked <.< .


I say this because even on the release notes of 2.0.2 it clearly states the version includes bug fixes.


Not trying to start anything just trying to clear things up for myself.


http://www.simplemachines.org/community/index.php?topic=463103.0

Twitch's WorldFree Computer Support Forum - My SMF Themes - For affordable custom themes PM me

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 69,626
    • StoryBB/StoryBB on GitHub
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #191 on: July 21, 2012, 09:12:24 PM »
The bulk of the 2.0.2 patch is security. There are non-security bug fixes, but nothing that is more than one-line changes, and in low single digits.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline NBK*Twitch

  • Full Member
  • ***
  • Posts: 690
  • Gender: Male
    • Twitch's World
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #192 on: July 21, 2012, 09:14:56 PM »
The bulk of the 2.0.2 patch is security. There are non-security bug fixes, but nothing that is more than one-line changes, and in low single digits.


Okay thanks for clearing that up :).

Twitch's WorldFree Computer Support Forum - My SMF Themes - For affordable custom themes PM me

Offline gerzok

  • Semi-Newbie
  • *
  • Posts: 27
  • Gender: Male
    • @gerzok on Twitter
    • Grupo ClickMedia
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #193 on: July 27, 2012, 04:04:49 PM »
Thanks a lot man :D

Offline HBM

  • Newbie
  • *
  • Posts: 1
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #194 on: August 03, 2012, 11:46:06 PM »
I'm new and taking a spin around. Great software....might replace my bulletin with this,,,

Offline trcx

  • Newbie
  • *
  • Posts: 2
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #195 on: August 26, 2012, 11:27:42 PM »
Apologies if some one has already asked this, but is there some kind of mailing list I can subscribe too for alerts of when smf publishes a new release? 

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 57,355
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #196 on: August 27, 2012, 12:51:24 AM »
no....   if there is a critical security release or a major release, the team usually sends an announcement to all accounts on this system.
The SMF admin on your own forum also will announce when there is an update.

or, you can just keep an eye on this board....
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline sharks

  • Sr. Member
  • ****
  • Posts: 891
  • Gender: Male
  • There's always a way.
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #197 on: August 28, 2012, 01:23:34 AM »
It's been a while since the last update... Only a couple of bugs have been fixed in the past months. :(
SMF 2.0 Theme Color Editor
http://www.colorizeit.com/browse/24/smf-20-themes.html

SMF Package Parser to view all edits made by any modification package:
http://resourcez.biz/PackageParser/

Firefox is the best browser for SMF!
http://www.mozilla.com/en-US/firefox/fx/

Offline Suki

  • Kaizoku Jotei
  • Developer
  • SMF Super Hero
  • *
  • Posts: 15,360
  • I don't really come from outer space
    • MissAllSunday on GitHub
    • SMF mods
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #198 on: August 28, 2012, 07:59:12 AM »
It's been a while since the last update... Only a couple of bugs have been fixed in the past months. :(

https://github.com/SimpleMachines/SMF2.1
Disclaimer: unless otherwise stated, all my posts are personal and does not represent any views or opinions held by Simple Machines.

Look at them. They're just asking for it. Maybe the human race deserves to be wiped out.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 57,355
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.2 and 1.1.16 critical security patches released
« Reply #199 on: August 28, 2012, 09:10:20 AM »
Sharks,

Once a release goes to final, only critical/major bugs or security issues get addressed with point releases.
The effort gets put into the next MAJOR release (in this case 2.1) rather than non critical patches to the previous release (2.0.x.)
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.