geekhack

Site Announcements and Feedback => Announcements/Feedback/Suggestions => Topic started by: MMB on Sat, 22 December 2012, 12:30:07

Title: SMF Security Update Notification
Post by: MMB on Sat, 22 December 2012, 12:30:07

Simple Machines Forum has released a security patch with version numbers: SMF 1.0.23, SMF 1.1.17 and SMF 2.0.3.
A security issue has been identified in all versions and is fixed with this patch, therefore it is recommended to make sure you update your forums immediately to ensure your community is safe.
In addition to the security patch, a few bug fixes to SMF 2.0.2 are also included within the patch for 2.0.x.
The most relevant bug fix is an issue that will arise in few months with PayPal: starting on February 1, 2013 PayPal will only accept headers which comply with the HTTP 1.1 specification.

If you are running 2.0.2, you can update your forum to 2.0.3 using the package manager. You should see the upgrade notification in the Admin panel and in the package manager, allowing you to download and install seamlessly. If you don't have a notification about the update, please run the scheduled task "Fetch Simple Machines files".
You can also download the patch for 2.0.2 from the customize site: smf_patch_2.0.3.tar.gz patch, and install it using the package manager.

If you are running 1.1.16, you can update to 1.1.17 with the smf_patch_1.0.23_1.1.17.tar.gz patch, also using the package manager.
If you are running SMF 1.0.22, take into consideration that this will most likely be the last patch for this version of SMF, which is reaching its "end of life". You can update to 1.0.23 with the smf_patch_1.0.23_1.1.17.tar.gz patch, also using the package manager.

If you use older versions of SMF, you can upgrade with the full upgrade packages from the downloads page.
Please find the changelog for the latest release, as usual, on the downloads page as well:
http://download.simplemachines.org/ (http://download.simplemachines.org/)

For any questions, please ask them on our community.
http://www.simplemachines.org/community (http://www.simplemachines.org/community)

Thank you for using SMF!


Regards,
Simple Machines Forum
http://www.simplemachines.org/ (http://www.simplemachines.org/)[/size]

Title: Re: SMF Security Update Notification
Post by: SmallFry on Sun, 23 December 2012, 14:11:34

Good to know! Thanks MMB!

Title: Re: SMF Security Update Notification
Post by: mkawa on Sun, 23 December 2012, 16:15:50

thanks for the heads up mmb