форум vBSupport.ru > vBulletin > All versions of vBulletin
  • »
VBsupport перешел с домена .ORG на родной .RU Ура! Пожалуйста, обновите свои закладки - VBsupport.ru
 
 
 
 
stwan
Знаток
 
stwan's Avatar
Default vBulletin 4.1.3, 4.1.4 and 4.1.5 Security Patch
0

Quote:
vBulletin Publishing suite and Forum Classic

4.1.5pl1
4.1.4pl3
4.1.3pl3

Has been released.

This patch strengthens the security of the AdminCP to prevent a reported XSS attack in vBulletin versions 4.1.3, 4.1.4 and 4.1.5. To resolve this issue, it has been necessary to release a patch level version for these three versions only. The issue is limited to certain browsers only, and does not affect versions of vBulletin prior to 4.1.3.

The patching process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required.

As with all security-based releases, we recommend that all customers upgrade as soon as possible in order to prevent any potential damage resulting from the flaw being exploited.


Patching Versions 4.1.3, 4.1.4 and 4.1.5

The process you will be required to follow to make your board immune to this flaw is very simple.

Visit the Patches section of the vBulletin Members' Area and download the patch for the version you are using, then extract the files from the archive you downloaded, then upload the files to your board via FTP etc., overwriting the existing files. This will update your version to the PL release.


Upgrading from Versions Earlier than 4.1.3

If you are not already running 4.1.3+, we have updated the downloadable version of our software, so you can download version 4.1.3, 4.1.4 and 4.1.5 from the Members' Area and perform an upgrade as normal.

Full instructions for upgrading vBulletin are available here.
Кичмар
Bot
Yandex Bot Yandex Bot is online now
 
Join Date: 05.05.2005
Реклама на форуме А что у нас тут интересного? =)
 
 
smaragdov
Продвинутый
 
smaragdov's Avatar
Default
0

да уж...
 
 
Tempa
Знаток
 
Tempa's Avatar
Default
0

А ни у кого этого патчика нет?
А то в сравнении с 4.1.4 - 4.1.5 ангел во плоти (ужас какие огрехи позорные в 4.1.4 сделаны...). Но без патча как-то обновляться не охота =)
 
 
ower
Продвинутый
 
ower's Avatar
Default
8

vBulletin Suite v4.1.5 Patch Level 1 PHP NULL-FS
depositfiles.com
letitbit.net

vBulletin Forum v4.1.5 Patch Level 1 PHP NULL-FS
depositfiles.com
letitbit.net

vBulletin v4.1.5 Patch Level 1 PATCH ONLY PHP NULL-FS
depositfiles.com
letitbit.net
 
 
Aviadozor
Простоузер
Default
0

а как обновлять? а то боюсь навредить, подскажите пожалуйста
 
 
ower
Продвинутый
 
ower's Avatar
Default
0

Aviadozor, просто поверх распакуйте на сервере.
 
 
nikos
Знаток
Default
0

Quote:
Originally Posted by ower View Post
vBulletin Forum v4.1.5 Patch Level 1 PHP NULL-FS
depositfiles.com
letitbit.net
Перезалейте пожалуйста, а то там файлы удалены, очень надо.
 
 
ikopylov
Гуру
vBSNews
 
ikopylov's Avatar
Default
0

Quote:
Originally Posted by nikos View Post
Перезалейте пожалуйста, а то там файлы удалены, очень надо.
Обновляйтесь сразу до 4.2PL3 или 4.1.9
 
 
nikos
Знаток
Default
0

Quote:
Originally Posted by ikopylov View Post
Обновляйтесь сразу до 4.2PL3 или 4.1.9
Считаете что 4.2PL3 или 4.1.9 более стабильны?
 
 
Luvilla
Гость
Default

Quote:
Originally Posted by nikos View Post
более стабильны?
в них закрыто больше дыр)
последняя в 4.1.х - 4.1.12, есть смысл обновляться до неё
в 4.2 существенно добавлен функционал
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off




All times are GMT +4. The time now is 11:38 AM.


Powered by vBulletin® Version 3.0.5
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Loading...