vBulletin 3.6.5 and 3.5.8 Released

[Paul M]

Due to a reported exploit that affects both vBulletin versions 3.5.x and 3.6.x, new versions of both have been released today by Jelsoft.

Although the reported exploit is inaccurate and does not work as claimed (unless a highly unlikely set of circumstances exist) it has highlighted a potential security issue in these vBulletin versions.

The release announcements can be found here ;

vBulletin 3.5.8 (http://www.vbulletin.com/forum/showthread.php?t=221903)
vBulletin 3.6.5 (http://www.vbulletin.com/forum/showthread.php?t=221905)

[da420]

Thanks Paul for the heads up.

Thank god there's no template changes. :P

[daddygrim]

safe!!!

[Nick2112]

goood man

[Shazz]

They happen so fast

[projectego]

Thanks for the update, Paul. :)

[Snake]

Thanks for the reminder! :)

[SaN-DeeP]

Dont think we would really require this release to be installed now (as per the annoucement its very difficult for hacker to break in) might wait for 3.6.6 instead.

[Lizard King]

Dont think we would really require this release to be installed now (as per the annoucement its very difficult for hacker to break in) might wait for 3.6.6 instead.
But you shall at least apply the patch to increase security level on your board.

[redspider]

Dont think we would really require this release to be installed now (as per the annoucement its very difficult for hacker to break in) might wait for 3.6.6 instead.
is better to be safe than sorry .I was thinking do the same thing but decide to upgrade all my boards 1 hours of work on each one lol .

but if for some reason I would leave it for later wont post any where that I wont upgrade .

[Mohajer]

Thanks for Announcement.
i dont have time for full update.
use patch will solve this problem?

[Shazz]

Thanks for Announcement.
i dont have time for full update.
use patch will solve this problem?

yes for temp.
But if your running 3.6.1 Errm..

[Jesakos]

nice thnx fast update ^^ ;)

[katilkuzu]

thank you updated :)

[Pete C]

No template edits - gee why can't they all be like this? . . the FTP took longer than the upgrade, and we're all sewn up nice and tight again.

Thanks for the prompt release guys . . from the Email I received I'd say it would be an impossible exploit on my own sites, and highly unlikely elsewhere . . but vB was chosen primarily for security and ease of use. Here's another fine example . . thank you.

Might this be a good time to ask if we can have 3.6.6 without template edits too? :p

[Sam1985]

is there a history log for all these releases?

[audis3]

Hallo everyone.I upgraded yesterday from 3.6.4 to 3.6.5 version,but i still have the problem with the js files.The "New Posts" and "Quick Links" link,"Thread Tools","Rate Thread" etc.. (also the link to jump to page...) sometimes work,sometimes not.

Why?Can anyone help me?

[Marco van Herwaarden]

Please post support question in the Support forums at www.vbulletin.com

[audis3]

Done!
http://www.vbulletin.com/forum/showthread.php?t=224028