The Arcive of Official vBulletin Modifications Site.

vB.Org System · #1 10-17-2007, 01:40 PM

vBulletin 3.6.8 Patch Level 1

This release is a patch to the 3.6.8 to fix a security issue reported to us this morning. Only 3.6.8 is affected by this issue. The only changes in this release are for this security issue.

The changed files are:

includes/class_bbcode.php
includes/version_vbulletin.php

There are no template changes.

What is a Patch Level? How does it differ from a full release?

A patch level release contains fixes for only the most critical issues in the previous release. In this case, this means the only changes are to address a security issue.

It is designed to be installed directly over top of your 3.6.8 installation, with no other action. You do not need to run any upgrade scripts.

How to Upgrade
This is not a full upgrade. You do not need to run any upgrade scripts to complete the upgrade.

Patch: Download a patch file discussed in this thread and upload them to your web server, overwriting the existing files. The patch is available from the Members' Area patch page or you can find it attached to this thread.
Full Package: Alternatively you can download the full package in the vBulletin Members Area and again upload the affected files mentioned in this thread.

If the files have been overwritten properly, your version will be listed as "3.6.8 Patch Level 1" in the administrators' control panel. Your version will still say 3.6.8 on the front-end.

More...

Mazinger · #2 10-17-2007, 03:19 PM

Any body knows what's the affected part exactly?

Paul M · #3 10-17-2007, 03:25 PM

Apart from the version file, only one file has changed - the BB code class file.

SCRIPT3R · #4 10-17-2007, 03:49 PM

kewl, now i have something to do today.

ragtek · #5 10-17-2007, 03:51 PM

the "update" needs 1 minute

start ftp client, connect replace file, thats it

so you have nothing todo the whole day

Analogpoint · #6 10-17-2007, 04:04 PM

Quote:

Originally Posted by Mazinger

Any body knows what's the affected part exactly?

They probably didn't mention what was changed, so boards that haven't updated won't be exploited. But it's super-simple to see that one line of code was changed, and 3 lines added if you use diff or other file-comparison tools.

wengi · #7 10-17-2007, 04:17 PM

Patch applied

thanks Paul

Regards
Wengi

rizelim · #8 10-17-2007, 07:38 PM

vbulletin 3.6.8 upgrage 3.6.8 Patch Level 1

iogames · #9 10-17-2007, 08:15 PM

Quote:

Originally Posted by ragtek

the "update" needs 1 minute

start ftp client, connect replace file, thats it

so you have nothing todo the whole day

Yeah, it's so easy... but when I hear about something wrong with vB, that means instant migraines...

DragonMasterNYC · #10 10-17-2007, 08:16 PM

Finally some type of update.

Now I have something to do to my forums when I get home.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04197 seconds Memory Usage 2,253KB Queries Executed 11 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)ad_showthread_firstpost (1)ad_showthread_firstpost_sig (1)ad_showthread_firstpost_start (2)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)navbar (3)navbar_link (120)option (1)pagenav (1)pagenav_curpage (1)pagenav_pagelink (10)post_thanks_box (10)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (10)post_thanks_postbit_info (10)postbit (10)postbit_onlinestatus (10)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!