YaBB SE Community

YaBB SE Info => News From the YaBB SE Team => Topic started by: Nemesis on April 19, 2003, 01:09:10 AM

Title: 1.5.1 Final "bug/security" update package
Post by: Nemesis on April 19, 2003, 01:09:10 AM
Please upgrade to 1.5.2.

Here are some bug fixes and a security update for YaBB SE 1.5.1.

All users are recommended to upgrade their boards to this fix. These packages fix a large security hole in YaBB SE 1.5.1 Final and a few reported bugs.

Before updating it is recommended to backup all files and db structure, just incase anything happens.

Changes:
Users can update their board using one of the three diffrent methods:
http://www.yabbse.org/unknown/temp/yabbse_1-5-1_bugfix.zip (http://www.yabbse.org/unknown/temp/yabbse_1-5-1_bugfix.zip)
http://www.yabbse.org/unknown/temp/yabbse_1-5-1_bugfix.mod.yp (http://www.yabbse.org/unknown/temp/yabbse_1-5-1_bugfix.mod.yp)

http://www.yabbse.org/unknown/temp/yabbse_1-5-1_bugfix.mod

Updated full package files will be uploaded to SF for clean installs within the next day or two.

Nemey
Title: Re:1.5.1 Final "bug/security" update package 1
Post by: David on April 19, 2003, 01:19:21 AM
Please be aware that if you choose to run the mod file you will also have to download the zip package for non-moded boards.  From this package you will have to upload new.gif and dutch.lng.  Also note that for the YaBB Pack you will have to manually download the file to your Packages directory.
Title: Re:1.5.1 Final "bug/security" update package 1
Post by: therczone on April 19, 2003, 01:28:15 AM
How do I install it? where do I upload it? I downloaded the 2nd one. Where do I upload it to?
Title: Re:1.5.1 Final "bug/security" update package 1
Post by: Armadillo on April 19, 2003, 01:31:13 AM
I just upgraded my board to 1.5.1 and was about to do my mods when I saw this.
I did the bug fix.
Now, a modding I shall go.
Title: Re:1.5.1 Final "bug/security" update package 1
Post by: David on April 19, 2003, 01:38:28 AM
How do I install it? where do I upload it? I downloaded the 2nd one. Where do I upload it to?
As I said in my post, upload it to your Packages folder.  Then goto your admin center -> YaBB Pack - > Browse YaBB Packs -> Then click on Apply Mod for this one.
Title: Re:1.5.1 Final "bug/security" update package 1
Post by: silentbob on April 19, 2003, 01:46:33 AM
thanx! d/l and installed... though.. update package 1.. <-- are we expecting more? should we hold off on modding?
Title: Re:1.5.1 Final "bug/security" update package 1
Post by: David on April 19, 2003, 01:49:43 AM
thanx! d/l and installed... though.. update package 1.. <-- are we expecting more? should we hold off on modding?
No, more should not be expected.  This should be the last release in the 1.x code line.
Title: Re:1.5.1 Final "bug/security" update package
Post by: Nemesis on April 19, 2003, 02:02:26 AM
If anything major is found we'll let everyone know, but we don't expect another package.

We place those names just in case there ever is a need for one, new security hole, major bug, etc...
Title: Re:1.5.1 Final "bug/security" update package
Post by: old dan on April 19, 2003, 03:49:05 AM
Here are some bug fixes and a security update for YaBB SE 1.5.1.

All users are recommended to upgrade their boards to this fix. These packages fix a large security hole in YaBB SE 1.5.1 Final and a few reported bugs.

Before updating it is recommended to backup all files and db structure, just incase anything happens.

Changes:
  • fixed edit profile on windows servers.
  • fixed dutch uses wrong images.
  • fixed security hole.
  • fixed Printpage doesn't do nested quotes.
  • updated spanish new.gif.
  • readme.html no longer claims OSI certification.
  • readme.html doesn't tell you to upload files that you won't have.


Nemey
Well I don't care if it doesn't edit the profile right on Windows servers. The best fix would be to use a *nix server. ;)

My Dutch users (if any) say thanks. :)

Deleted news.php a long time ago.

Thanks :)

thanks for the new image. Don't know what it says but I bet Spanish folks do. :)

Too bad about the OSI certification. :(
Title: Re:1.5.1 Final "bug/security" update package
Post by: A.M.A. on April 19, 2003, 04:21:54 AM
Changes:
  • fixed security hole.
  • fixed Printpage doesn't do nested quotes.
  • readme.html no longer claims OSI certification.
  • readme.html doesn't tell you to upload files that you won't have.
Does that apply to 1.4.1?

cheer
Title: Re:1.5.1 Final "bug/security" update package
Post by: acf [delete me]! on April 19, 2003, 04:31:19 AM
Is this fix allread in the standard download of 1.5.1 or shout i if i download it still have to patch it?
Title: Re:1.5.1 Final "bug/security" update package
Post by: Meriadoc on April 19, 2003, 04:32:41 AM
Arab_ME - It's recommended you update from 1.4.1 to 1.5.1 Final, then make these changes (or when it is uploaded to SF go from there)
1.5.1 is more secure and stable as well as faster.
Title: Re:1.5.1 Final "bug/security" update package
Post by: [Unknown] on April 19, 2003, 05:20:17 AM
Sourceforge has NOT been updated yet.

-[Unknown]
Title: Re:1.5.1 Final "bug/security" update package
Post by: A.M.A. on April 19, 2003, 05:27:58 AM
Arab_ME - It's recommended you update from 1.4.1 to 1.5.1 Final, then make these changes (or when it is uploaded to SF go from there)
1.5.1 is more secure and stable as well as faster.
Yes I know that, but my host did not upgrade PHP yet. And some folks still using the old version cause of the PHP restriction.

cheer
Title: Re:1.5.1 Final "bug/security" update package
Post by: Mr._Unregistered on April 19, 2003, 06:37:58 AM
I was just about to install supermod... how should I handle this update since I don't have anything installed currently?
Title: Re:1.5.1 Final "bug/security" update package
Post by: [Unknown] on April 19, 2003, 06:39:14 AM
This update doesn't make a lot of changes.  Just install it anyway you want to.  After that, most every mod should still work.

-[Unknown]
Title: Re:1.5.1 Final "bug/security" update package
Post by: Jay1025 on April 19, 2003, 06:59:25 AM
If I'm running 1.5.1RC1 do I need this update?

thanks.
Title: Re:1.5.1 Final "bug/security" update package
Post by: [Unknown] on April 19, 2003, 07:11:06 AM
If I'm running 1.5.1RC1 do I need this update?

thanks.

You should probably upgrade to 1.5.1 final first.

-[Unknown]
Title: Re:1.5.1 Final "bug/security" update package
Post by: RonStarR on April 19, 2003, 07:31:48 AM
News.php
We're going to look for:
--------------------------------------------------------------------------------

   if ($template == null)
      include('news_template.php');
   else
   {
      if ($ext == null)
         include($template . '.php');
      else
         include($template . '.' . $ext);
   }
--------------------------------------------------------------------------------
String not found, there's probably an error in your mod.
Done.

any ideas why theres an error this is the new file you have available
Title: Re:1.5.1 Final "bug/security" update package
Post by: [Unknown] on April 19, 2003, 07:44:19 AM
News.php
We're going to look for:
--------------------------------------------------------------------------------

   if ($template == null)
      include('news_template.php');
   else
   {
      if ($ext == null)
         include($template . '.php');
      else
         include($template . '.' . $ext);
   }
--------------------------------------------------------------------------------
String not found, there's probably an error in your mod.
Done.

any ideas why theres an error this is the new file you have available

Just try uploading the new News.php from the zip file.

-[Unknown]
Title: Re:1.5.1 Final "bug/security" update package
Post by: vcblues on April 19, 2003, 10:50:09 AM
I think it is a shame that yabb don't keep there own versions up to date! I just downloaded yabb from the site, surly I do NOT have to already update?
Title: Re:1.5.1 Final "bug/security" update package
Post by: Nemesis on April 19, 2003, 10:56:42 AM
read my first post....

Quote
Updated full package files will be uploaded to SF for clean installs within the next day or two.
Title: Re:1.5.1 Final "bug/security" update package
Post by: vcblues on April 19, 2003, 11:00:00 AM
Since I haven't modded the listed files I am going to just replace the files in my yabb! Should I upload all the files ascii, any binary other than the image?
Title: Re:1.5.1 Final "bug/security" update package
Post by: Nemesis on April 19, 2003, 11:07:01 AM
ascii = files
binary = images

that's it...
Title: Re:1.5.1 Final "bug/security" update package
Post by: taznumber1 on April 19, 2003, 12:55:44 PM
I think it is a shame that yabb don't keep there own versions up to date! I just downloaded yabb from the site, surly I do NOT have to already update?

Well I think just about any piece of software now a days you will have to install the software and then go to the web and check for updates.  Have you every used a piece of microsoft software, and once you installed it, that it did not have updates, I think not.  So I think they are doing a good job and keeping things just up the best that they can.
Title: Re:1.5.1 Final "bug/security" update package
Post by: [Unknown] on April 19, 2003, 12:59:30 PM
My goodness!  It was only uploaded TODAY!

Man....

-[Unknown]
Title: Re:1.5.1 Final "bug/security" update package
Post by: vcblues on April 19, 2003, 01:07:12 PM
Oh I am sorry! I thought this was an older thread! Please forgive me.
Title: Re:1.5.1 Final "bug/security" update package
Post by: yabbadooSE on April 19, 2003, 02:01:47 PM
i just wanted to say thanks to the coders for being on top of things !  we all appreciate the fantastic forum that YaBB SE is.
i got the forum announcement when i checked email, applied it in yabb pack center, and all this in under 120 seconds :).
Title: Re:1.5.1 Final "bug/security" update package
Post by: Douglas on April 19, 2003, 06:17:30 PM
4 sites updated in less than 2 minutes, manually.  Great work, guys, and thank you for staying on top of this update biz!
Title: Re:1.5.1 Final "bug/security" update package
Post by: Silicon-Surge on April 19, 2003, 06:25:11 PM
Hey Thanks Guys !!! :D

recived the Email this morning Got the Patch implimented a few minutes later (litteraly)... Pain Free updates :D
Title: Re:1.5.1 Final "bug/security" update package
Post by: oscar2001 on April 20, 2003, 02:48:20 AM
Exellent :)
Thanks people, good job :)
Title: Re:1.5.1 Final "bug/security" update package
Post by: vcblues on April 20, 2003, 02:48:58 AM
I first off want to say THANKS to the Yabb team! Not only do you save us time and money... your giving us the best forum software available and doing it for selfless reasons!

Now plese tell me where I upload the readme.html to? I don't have a readme.html in my yabb folder!
Title: Re:1.5.1 Final "bug/security" update package
Post by: Gobalopper on April 20, 2003, 03:00:21 AM
You don't have to do anything other then read it, no need to upload it.
Title: Re:1.5.1 Final "bug/security" update package
Post by: vcblues on April 20, 2003, 03:09:59 AM
Thanks a lot! Both of my domains have been upgraded with NO errors! 100% sucessful! Well let it ride for a while and see if all is well! I am a long time user of Yabb Gold. I just switched (I call it upgrading) from Yabb Gold to Yabb SE! I say I made a great move so far! Thanks again for the quick security update!

PS: I updated by replacing the files via ftp. No problem!

Check out my two yabb sites and give me any pointers!

The Blues Site
http://thebluessite.com

Winemakers World
http://winemakersworld.com
Title: Re:1.5.1 Final "bug/security" update package
Post by: DJTommyC on April 20, 2003, 07:09:47 AM
Can't download the file..
Get a really strange page in front of me..
Title: Re:1.5.1 Final "bug/security" update package
Post by: acf [delete me]! on April 20, 2003, 08:56:48 AM
Can't download the file..
Get a really strange page in front of me..

no probs at all... what page/error do you see?
Title: Re:1.5.1 Final "bug/security" update package
Post by: oldiesmann on April 22, 2003, 09:25:37 AM
I've seen that before... Internet Explorer automatically assumes you want to view that file on the server, instead of downloading it because it doesn't know what kind of file that is. Simply right-click on the link and select "Save Target As". That should work.
Title: Re:1.5.1 Final "bug/security" update package
Post by: [Unknown] on April 22, 2003, 11:31:01 AM
Please use 1.5.2 instead.

http://www.yabbse.org/community/index.php?board=9;action=display;threadid=21830

-[Unknown]