vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   News and Announcements (https://vborg.vbsupport.ru/forumdisplay.php?f=2)
-   -   vBulletin 3.0.14 Released (https://vborg.vbsupport.ru/showthread.php?t=114083)

Brad 04-26-2006 01:40 AM
vBulletin 3.0.14 Released
 
From vBulletin.com's Forum

Quote:
vBulletin 3.0.14

This release of vBulletin fixes an unpleasant cross-site scripting flaw in the 3.0.x branch. We recommend all customers running previous versions of vBulletin 3.0.x to upgrade or patch to 3.0.14 as soon as possible.

[high]Please note that vBulletin 3.5.x and vBulletin 2.3.x are not affected by this problem.[/high]

We always recommend that customers perform a full upgrade to the current version using install/upgrade.php, but if time does not permit, or for whatever other reason an upgrade would be problematic, a patch is available. Details follow:

Full Upgrade

The best way to fix the problem is to perform a full upgrade, downloading the complete 3.0.14 package from the vBulletin Members' Area and following the regular upgrade instructions.

Patch File

Patches are now available in the members' area. You may view available patches here. Alternatively, you may use the zip attached to this post to apply the patch. Both methods are equivalent.

Go to the page mentioned above and download the "Security patch for 3.0.13" or download the zip at the end of this post. Extract the zip archive, then connect to your web server using FTP and overwrite the following files using the replacement versions from the zip.

* includes/functions_bbcodeparse.php


Notes:

1. If you cannot download the attachment in this post, you are not currently registered as a license customer. Please see this thread for instructions on how to proceed.
2. You do not need to download this patch if you perform a full upgrade to 3.0.14.
3. If you only apply a patch, your version number will not change. Your version number will only be updated to 3.0.14 if you perform a full upgrade.


To repeat, go here to download the "Security patch for 3.0.13", or download the zip file attached to this post.

Daniel 04-26-2006 01:43 AM
Thanks for the update. :)

Freesteyelz 04-26-2006 06:18 AM
Hehe, Brad, you caught me off-guard. For a second there I thought we (3.5+ users) were going retro.

Snake 04-28-2006 12:52 PM
Thanks for the latest release, Jelsoft! :)


All times are GMT. The time now is 05:42 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.00898 seconds
  • Memory Usage 1,721KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (4)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete