vBulletin 3.6.8 Patch Level 2 Released

[vB.Org System]

vBulletin 3.6.8 Patch Level 2

This release is a patch to 3.6.8 to fix a security issue reported to us within the WYSIWYG editor for Firefox. Only 3.6.8 is affected by this issue. The only changes in this release are for this security issue, fixes for 3.6.8 Patch Level 1 are also included with the patch.

The changed files are:
includes/functions_editor.php
includes/class_bbcode.php (This is part of the Patch Level 1 fix)
includes/version_vbulletin.php There are no template changes.

What is a Patch Level? How does it differ from a full release?

A patch level release contains fixes for only the most critical issues in the previous release. In this case, this means the only changes are to address a security issue.

It is designed to be installed directly over the top of a 3.6.8 installation, with no other action. You do not need to run any upgrade scripts.

How to Upgrade
This is not a full upgrade. You do not need to run any upgrade scripts to complete the upgrade.
Patch: Download a patch file discussed in this thread and upload them to your web server, overwriting the existing files. The patch is available from the Members' Area patch page (http://members.vbulletin.com/patches.php) or you can find it attached to this thread.
Full Package: Alternatively you can download the full package in the vBulletin Members Area (http://members.vbulletin.com) and again upload the affected files mentioned in this thread. If the files have been overwritten properly, your version will be listed as "3.6.8 Patch Level 2" in the administrators' control panel. Your version will still say 3.6.8 on the front-end.


More... (http://www.vbulletin.com/forum/showthread.php?t=247739&goto=newpost)

[Shazz]

Upgraded.
Thanks.

[Michael Biddle]

patched

[Pandemix]

I patched it up as well, thanks.

[Jespah]

Is there any way this patch could stop a member who is running Firefox from loading my site? My admin is not able to get the site up now and has pinged the server and is fine.

[Atilla_UYGUN]

3.6.8 patch level 2 upgraded :)
Thanks..

[hddstudio]

upgraded...thanks for the notify.........

[Brandon Sheley]

patched :)

[wengi]

Patched :)

[DragonMasterNYC]

Got it and patched it

[Lyapko]

Thanks

[Quantnet]

patched

[projectego]

I'll be updating now. Thanks. :)

[ETDC]

I can't download it from the Members' Area patch page. :( When I click on: Latest Version: 3.6.8 Patch Level 2, it kicks me to the vB forum (where I'm not registered).

[d.j.carusso]

Thanks !:up:

[ETDC]

Anyone?

[WFZ]

Ill patch it later. :)

[Marco van Herwaarden]

Anyone?
Please don't use this thread for support. If you have problems with this patch, please either post at vBulletin.com support forums or open a Support Ticket.

[ETDC]

That's my point - I'm not registered there on the forum. I can download any other patch from the members area except this one - the link kicks me to the forum. :(

[Marco van Herwaarden]

Then Open a Support Ticket if you do not want to register an account on vB.com.

[nexialys]

That's my point - I'm not registered there on the forum. I can download any other patch from the members area except this one - the link kicks me to the forum. :(

We call this "lazyness"... take 3 minutes to register, instead of requesting somewhere else.

[ETDC]

We call this "lazyness"...
We call this "arrogance" and "blind assumption". Why should I have to sign up to yet another forum just to download something I PAID FOR.

Thanks for your reply Marco - most helpful. :) I'll get to it.

[joseph3747]

Ok Im a newbie here especially with patches - exactly how do I get it installed and what files do i need to overwrite ( I didnt see the exact names in my file manager) Im using 3.6.8.1

[WFZ]

There, done.

Just patched it up. :up:

[joseph3747]

Do you load it using your CP and file manager? How can you tell if its updated, should everything say 3.6.8 rev2 or something? now which directory - my guess would be Web Root (public_html/www) or is it these below ?
Home Directory
Public FTP Root (public_ftp

--------------- Added 1194795162 at 1194795162 ---------------

Do you load it using your CP and file manager? How can you tell if its updated, should everything say 3.6.8 rev2 or something? now which directory - my guess would be Web Root (public_html/www) or is it these below ?
Home Directory
Public FTP Root (public_ftp

When its mentioned to load it in ASCII, after you unzip the files what format are they in and how do I convert? I need a little more details on how to apply this patch - not general high level responses -

[ETDC]

I was told to use 'Security patch for 3.6.8 / 3.6.8 Patch Level 1'

- doesn't work.

[Michael Biddle]

just upload files via ftp. it overwrites 2 or 3 files i think

[Shazz]

just upload files via ftp. it overwrites 2 or 3 files i think

3 :D

[ETDC]

Files overwritten - still doesn't work.

[Michael Biddle]

then you must be doing something wrong. delete the 2 files. then upload the new ones

[ETDC]

There's three files:

class_bbcode.php
functions_editor.php
version_vbulletin.php

[Michael Biddle]

i knew it was 3. way to go shazz

[ETDC]

then you must be doing something wrong. delete the 2 files. then upload the new ones
Tried that - no joy.

I have opened a ticket regarding this but I've been told to use 'Security patch for 3.6.8 / 3.6.8 Patch Level 1'. Surely, it's '3.6.8 Patch Level 2' I need to use? If so, I still can't download it.

[Michael Biddle]

just download the top one. it has both fixes/

[sandrose]

Is this relase realy secured. I don't think so.

Regards,

[Shazz]

Is this relase realy secured. I don't think so.

Regards,

Why wouldn't you think it would be? :confused:

[sundarmobiles]

patched thanks.......................

[GlennN]

Upgraded to the latest version, Thanks