vBulletin versions 2.3.9, 3.0.12, and 3.5.3 released.
 

A XSS (cross-site scripting) flaw has been discovered in all three branches of vBulletin, it's recommended that you upgrade your installation to the latest version.

vBulletin.com Announcement threads

vB 2.3.9: http://www.vbulletin.com/forum/showthread.php?t=170001

vB 3.0.12: http://www.vbulletin.com/forum/showthread.php?t=169999

vB 3.5.3: http://www.vbulletin.com/forum/showthread.php?t=169997

Upgrading vBulletin

Follow the instructions found here

Patch vBulletin

If you do not want to run the full upgrade at this time you should at least patch your installation. You can do this by using the files found below.

vB 2.3.9: Patch files

vB 3.0.12: Patch files

vB 3.5.3: Patch files

vB 3.5.x can also be patched with the plug-in system, click here for details.

Changed files/templates

A list of changed files/templates in the new version(s), this is helpful if you have made modifications to the source code or templates.

vB 2.3.9: list of changed files, No template changes.

vB 3.0.12: list of changed files, No template changes.

vB 3.5.3: list of changed files, list of changed templates.

Other bug fixes

vB 2.3.9: None

vB 3.0.12: None

vB 3.5.3: List of fixed bugs.

Nice! I'm on my way to upgrade to v3.5.2. Thanks for the heads up! :)

Oh my god 3.5.3 and i just installed the 3.5.2 with some hacks. :ermm:

Is possible upgrade from 3.5.2 to 3.5.3 without lost any hack? :surprised:

Have you installed any hacks that edit the source code?

If not then it should be as easy as doing a regular upgrade. You may get a plug-in that doesn't work correctly with the new version, but you can disable that from the admincp until a fix is provided from the author of the modification.

*downloads files*
*opens beyond compare*

time for the joy of patching vb...

about 15 files to "really" edit, not complicated.. the others are mistypes or line additions.

really easy, took me about 3 minutes and a half to upgrade by comparing files content - my boards are too much hacked for a global upgrade.

Just bumping this back to the top.

Isn't there a rule against bumping ...... ;)

Keeping customers up to date > bumping rule. ;)

Brad, I am going to report the post to you so you can give yourself a warning. :laugh: