phpBB 2.0.13 releaed - Critical

adam_uk · 02-28-2005, 04:17 AM

Quote:

Hi everyone,

phpBB Group announces the release of phpBB 2.0.13. This release addresses two recent security exploits, one of them critical. They were reported a few days after .12 was released and no one is more annoyed than us, having to release a new version in such a short period of time.
????: NamePros.com http://www.namepros.com/programming/72512-phpbb-2-0-13-releaed-critical.html

Fortunately both fixes are easy and in each case just one line needs to be edited.

The first issue is critical and we urge you to fix it on your forums as soon as possible:

Open includes/sessions.php

Find:

if( $sessiondata['autologinid'] == $auto_login_key )

Replace with:

if( $sessiondata['autologinid'] === $auto_login_key )

The second minor issue, reported to bugtraq several days ago, was the path disclosure bug in viewtopic.php. For further information on how to manually fix this bug please see our announcements forum at www.phpbb.com:

http://www.phpbb.com/phpBB/viewtopic.php?t=267563

As with all new releases we urge you to upgrade as soon as possible.

You can of course find this download available on our website at:

http://www.phpbb.com/downloads.php

As per usual three packages are available to simplify your upgrade.

Oh well now got to urge everyone to upgrade

alegend · 02-28-2005, 09:23 PM

thanks I havent checked phpBB.com in a few days and wouldnt have none about this update.

adam_uk · 03-01-2005, 03:03 AM

no problem. if you have installed your forums via cpanel you should be able to upgrade via that

Redleg · 03-01-2005, 03:37 AM

Originally Posted by alegend

thanks I havent checked phpBB.com in a few days and wouldnt have none about this update.

It's a good idea to sign up for their mailing list if you run any phpBB forums..
????: NamePros.com http://www.namepros.com/showthread.php?t=72512
http://www.phpbb.com/phpBB/viewtopic.php?t=249416

You'll get a mail each time there's an update..

02-28-2005, 09:23 PM	#2 (permalink)
alegend PHPHelpSite.com Join Date: Feb 2005 Location: Boston Posts: 2,580	thanks I havent checked phpBB.com in a few days and wouldnt have none about this update. __________________ MySpace Stuff - Default MySpace Layouts - Happy Birthday Comments

03-01-2005, 03:03 AM	THREAD STARTER #3 (permalink)
adam_uk Senior Member Join Date: May 2003 Posts: 2,187	no problem. if you have installed your forums via cpanel you should be able to upgrade via that

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)