Register Members List Search Today's Posts Mark Forums Read

Closed Thread
 
Thread Tools
  #1  
Old 09 Jun 2008, 12:30
vB.Org System vB.Org System is offline
 
Join Date: Aug 2007
vBulletin 3.7.1 PL1 & 3.6.10 PL1 Released

vBulletin 3.7.1 PL1 / vBulletin 3.6.10 PL1

The recent discovery of an obscure method in which to expose a cross-site scripting (XSS) error in vBulletin when using specific browser software means that it is necessary to release Patch Level (PL) versions of both 3.7.1 and 3.6.10.

Although it is difficult to exploit the XSS flaw, and the potential for exposure and damage is limited, we nonetheless recommend that customers upgrade to protect themselves.

Upgrading from 3.7.1 or 3.6.10

If you are already running 3.7.1 or 3.6.10, the process you will be required to follow to make your board immune to the XSS problem is very simple. Visit the Patches section of the vBulletin Members' Area and download either the patch for 3.7.1, or the patch for 3.6.10, according to the version you are currently running, then extract the files from the archive you downloaded, then upload the files to your board via FTP etc., overwriting the existing files. This will update your version to the PL1 release.

There is no need to run an upgrade script if you are already running 3.7.1 or 3.6.10.

Upgrading from Versions Earlier than 3.7.1 or 3.6.10

If you are not already running 3.7.1 or 3.6.10, you should download the most latest version from the Members' Area and perform an upgrade as normal.

Full instructions for upgrading vBulletin are available here.

PHP and MySQL Requirements

Please note that vBulletin 3.7.x requires at least PHP 4.3.3 and MySQL 4.0.16 or later.

However, we recommend that vBulletin 3.7.x is run on PHP 5.2.6 with APC (or a similar opcode cache) and MySQL 5.0.51 for best performance and stability.

End of Life for PHP 4

The PHP group has announced the end of life for PHP 4. We strongly recommend that customers update their servers to PHP 5.2.6 if they are still running PHP 4. vBulletin 3.7.1 supports PHP 5 and MySQL 5 fully, though you may need to disable strict mode for MySQL, see here on how to enable 'force_sql_mode'.

Note: We will continue to support PHP 4 in the vBulletin 3 series.

Download vBulletin 3.7.1 PL1 or 3.6.10 PL1

As usual, both versions released today are available for all customers with valid, active licenses to download from the vBulletin Members' Area.

vBulletin Members Area


More...
  #2  
Old 09 Jun 2008, 13:09
cheat-master30's Avatar
cheat-master30 cheat-master30 is offline
 
Join Date: Mar 2007
Location: Information Classified
Real name: cheat-master30
I have now upgraded my forum with the security patch, and everything went well.
__________________
Proud vBulletin supporter (cheat-master30 at official forum)
DS Ultimate- A Great Nintendo DS forum-
My Nintendo DS forum covering Mario Kart DS, Super Mario 64 DS and the like. Powered by the amazing vBulletin 3.7 software.
  #3  
Old 09 Jun 2008, 13:49
steve1966 steve1966 is offline
 
Join Date: Dec 2007
Thank you
  #4  
Old 09 Jun 2008, 13:59
bokmade bokmade is offline
 
Join Date: Feb 2002
Real name: Mansour
Thanks Patched ..
  #5  
Old 09 Jun 2008, 16:14
mannaraja's Avatar
mannaraja mannaraja is offline
 
Join Date: Dec 2007
Thank you................
  #6  
Old 09 Jun 2008, 17:00
KURTZ KURTZ is offline
 
Join Date: Nov 2006
Real name: Christian
just patched ...
  #7  
Old 09 Jun 2008, 19:24
Jase2 Jase2 is offline
 
Join Date: Dec 2007
Smooth as butter.
  #8  
Old 09 Jun 2008, 20:25
tekguru tekguru is offline
 
Join Date: May 2007
Patched, no problems yet!
  #9  
Old 10 Jun 2008, 04:10
NeuroLancer's Avatar
NeuroLancer NeuroLancer is offline
 
Join Date: Feb 2008
Real name: John
Thank you.
Just updated from 3.7
No problems.
  #10  
Old 10 Jun 2008, 05:03
Ohiosweetheart Ohiosweetheart is offline
 
Join Date: Dec 2005
Real name: Peggy
updated without a hitch.
  #11  
Old 10 Jun 2008, 06:21
Brandon Sheley's Avatar
Brandon Sheley Brandon Sheley is offline
 
Join Date: Mar 2005
Real name: Brandon
updated vb and the blog with no problems...yet
__________________

Email me for website help: brandon[at]sheley[dot]org
  #12  
Old 10 Jun 2008, 07:13
xxalexkimxx's Avatar
xxalexkimxx xxalexkimxx is offline
 
Join Date: Nov 2006
Mine also upgraded....
Thank you much!
  #13  
Old 11 Jun 2008, 21:35
weedheaven weedheaven is offline
 
Join Date: Jan 2007
No problems updating, even with the whole package
  #14  
Old 12 Jun 2008, 06:49
Jeanhdo Jeanhdo is offline
 
Join Date: Mar 2008
Real name: Jean
Thanks Patched ..
  #15  
Old 12 Jun 2008, 19:50
Phaedrus Phaedrus is offline
 
Join Date: Aug 2006
That was one easy upgrade.
Closed Thread



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 22:10.

Layout Options | Width: Wide Color: