Advertisement:

Author Topic: SMF 2.0.4 and 1.1.18 critical security patches released  (Read 2373290 times)

Offline jafonseca

  • Semi-Newbie
  • *
  • Posts: 57
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #80 on: February 04, 2013, 11:28:27 AM »
Is possible to update from 2.0.1 to 2.0.4?

Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 18,091
  • Gender: Male
  • Liroy van Hoewijk
    • coreisp on GitHub
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #81 on: February 04, 2013, 11:54:28 AM »
Is possible to update from 2.0.1 to 2.0.4?

Yes, with the large upgrade package that you can find on our download page.
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline beast44

  • Jr. Member
  • **
  • Posts: 191
  • Gender: Male
  • So What?
    • stumpburner.com
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #82 on: February 04, 2013, 12:15:38 PM »


  I've updated to from 2.0.3 to 2.0.4 Do I now have to uninstall 2.0.3?

 ;D

Don't have one, Don't want one, Not gona get one

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,752
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #83 on: February 04, 2013, 12:20:32 PM »
jafonseca, you can do it in one swoop with the large upgrade... but that will require a rienstallation of mods, etc. Or you can do it provgressively 2.0.1 -> 2.0.2 -> 2.0.3 -> 2.0.4 using the patch packages in the package manager.

beast44, no.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Argonaut

  • Semi-Newbie
  • *
  • Posts: 38
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #84 on: February 04, 2013, 12:22:43 PM »
this topic is not for support.  Please raise your issues in a topic in the support board.
...

Yes, I know.
...
Well, this is not a support question, it's only a statement.
...

I've started a new thread

www.simplemachines.org/community/index.php?topic=496641.0

Offline beast44

  • Jr. Member
  • **
  • Posts: 191
  • Gender: Male
  • So What?
    • stumpburner.com
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #85 on: February 04, 2013, 12:33:14 PM »


  I thank you very much. As always, all of you do a very good job

 ;D

Don't have one, Don't want one, Not gona get one

Offline Mstcool

  • Sr. Member
  • ****
  • Posts: 911
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #86 on: February 04, 2013, 11:29:36 PM »
That was pretty fast. I never even noticed. I saw the "alert box" mod and it says compatible with 2.0.4. And I'm just like what the heck? And then a couple of other mods had the same thing. LAWL!!! LOL!!! XD!!!

Offline Colin

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 7,880
  • Gender: Male
  • SMF Developer
    • colinschoen on GitHub
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #87 on: February 05, 2013, 03:00:43 AM »
That was pretty fast. I never even noticed. I saw the "alert box" mod and it says compatible with 2.0.4. And I'm just like what the heck? And then a couple of other mods had the same thing. LAWL!!! LOL!!! XD!!!
Indeed it was. Did the upgrade go alright for you?
"If everybody is thinking alike, then somebody is not thinking." - Gen. George S. Patton Jr.

Colin

Offline Gerkin

  • Semi-Newbie
  • *
  • Posts: 26
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #88 on: February 05, 2013, 06:41:42 AM »
Strangest thing ever ... on a 1.1.17 server I clicked through the update link in admin, the patch said it tested fine, clicked to apply ... and although it said it applied fine it didn't.  The only reason I noticed was that the version number in the footer did not update so I investigated further.  When I manually looked at the files to verify if it applied or not it indeed did NOT apply, the changes were not made to any of the files listed in the .mod or the .xml file.  The system did say that the mod was already applied (and it wasn't possible to back it out because it had no uninstaller) when I checked to see if it showed up as installed.

I applied all the edits by hand and it seems to be working fine, but this is a bit concerning.  Is it possible that a previous update somehow broke the ability to properly run these patches in an automated way?  If I can provide more information to test this hypothesis please let me know and I'll do what I can.  This is the first time in a looooooong time that I've had to apply a patch by hand for SMF!

Offline alchemyst

  • Newbie
  • *
  • Posts: 2
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #89 on: February 05, 2013, 09:33:04 AM »
The package manager has never worked for me.  I always get an incorrect URL/file not found error on the link in the admin area, trying to download the file from the package manager gives me an error saying their was an error and the file was empty.

Why doesn't this work; it works in many other programs without a hitch.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,752
  • Gender: Male
    • Kindred-999 on GitHub
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #90 on: February 05, 2013, 10:07:25 AM »
alchemyst, this topic is not for support.

Since it has bene installed (both through the package manager or admin link) and through the "downloaded patch" package on several thousand sites, it would seem that there is some odd configuration with your server.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline amko_sa

  • Semi-Newbie
  • *
  • Posts: 58
  • Gender: Male
  • Press any key to continue or any other key to quit
    • Newsapp IT support Portal
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #91 on: February 05, 2013, 10:55:15 AM »
Nice job. Thank you  :)

Offline Mstcool

  • Sr. Member
  • ****
  • Posts: 911
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #92 on: February 05, 2013, 03:11:54 PM »
Aha! Colin yes it did. :) thank you for asking. :)

Offline tbplayer

  • Semi-Newbie
  • *
  • Posts: 15
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #93 on: February 09, 2013, 02:22:28 AM »
Updated from 2.0.3 to 2.0.4 - no issues, all mods working.

Thanks for all of your great work!   :)

Offline Colin

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 7,880
  • Gender: Male
  • SMF Developer
    • colinschoen on GitHub
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #94 on: February 11, 2013, 04:49:10 PM »
Aha! Colin yes it did. :) thank you for asking. :)

Good stuff.
"If everybody is thinking alike, then somebody is not thinking." - Gen. George S. Patton Jr.

Colin

Offline Rambaldi

  • Newbie
  • *
  • Posts: 3
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #95 on: February 13, 2013, 06:30:04 AM »
i have this error:
Error retrieving information on step: Converting "log_online" (Item 4)
i update from version 2.0.2 to 2.0.4

Offline emanuele

  • SMF Super Hero
  • *******
  • Posts: 14,156
  • Gender: Male
  • THERE'S JUST ME
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #96 on: February 13, 2013, 07:42:02 AM »
How did you do the update? It seems you are using the upgrade, you may have applied the packages (patches or whatever) from the package manager instead: fir the 2.0.3 and then the 2.0.4.

ETA: also, it would be better if you open a topic in the support board and not use this topic for support. ;)


Take a peek at what I'm doing! ;D



Hai bisogno di supporto in Italiano?

Aiutateci ad aiutarvi: spiegate bene il vostro problema: no, "non funziona" non è una spiegazione!!
1) Cosa fai,
2) cosa ti aspetti,
3) cosa ottieni.

Offline HsvHome

  • Newbie
  • *
  • Posts: 3
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #97 on: February 13, 2013, 10:06:07 PM »
Dear users,

Simple Machines has released a critical security patch with version numbers: SMF 1.1.18 and SMF 2.0.4.
A few critical security issues have been identified in the two maintained versions and are fixed with this update, therefore it is recommended to make sure you update your forums immediately to ensure your community is safe. For SMF 2.0.x this update includes a few other minor bugs that have been fixed.

If you are running 2.0.3, you can update your forum to 2.0.4 using the package manager. You should see the upgrade notification in the Admin panel and in the package manager, allowing you to download and install seamlessly. If you don't have a notification about the update, please run the scheduled task "Fetch Simple Machines files".
You can also download the update for 2.0.3 from the customize site (Upgrades site page): smf_patch_2.0.4.tar.gz, and install it using the package manager.

If you are running 1.1.17, you can update to 1.1.18 from the package manager, following the instructions in the notification in the Admin panel, or downloading the patch from the customize site (Upgrades site page): smf_patch_1.1.18.tar.gz, and installing it using the package manager.

If you use older versions of SMF, you can upgrade with the full upgrade packages from the downloads page.
Please find the changelog for the latest release, as usual, on the downloads page as well:
http://download.simplemachines.org/

Please find more informations on the Online Manual:
* upgrading http://wiki.simplemachines.org/smf/Upgrading
* patching http://wiki.simplemachines.org/smf/Patching

Please do not use this topic for support requests. You will get a much quicker and better response by posting in the relevant support board!

Regards,
Simple Machines Forum

Edit: the language packs are currently broken, in few hours they will be regenerated, we are sorry for the inconvenience.


How do I know what version I have?  My SMF stopped working a couple of days ago.  I haven't touched a thing and I keep getting:Connection Problems

Sorry, SMF was unable to connect to the database. This may be caused by the server being busy. Please try again later.

What do I do at this point?  I haven't had to mess with this software in so long.  Everything has been running smooth.




link removed - Kindred
« Last Edit: February 13, 2013, 11:06:19 PM by Kindred »

Offline mashby

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,394
  • Gender: Male
  • badass beer hound
    • Choppix
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #98 on: February 13, 2013, 10:15:08 PM »
Hmm...not sure of course either. I would contact your host and ask about the status of your database server.
Always be a little kinder than necessary.
- James M. Barrie

Offline HsvHome

  • Newbie
  • *
  • Posts: 3
Re: SMF 2.0.4 and 1.1.18 critical security patches released
« Reply #99 on: February 13, 2013, 10:27:32 PM »
Do you mean my web hosting service?



link removed - Kindred
« Last Edit: February 13, 2013, 11:06:07 PM by Kindred »