Welcome, Guest. Please Login or Register.
March 28, 2024, 09:26:29 AM
Home Help Search Log in Register
News: SMF is the next generation in forum software, almost completely re-written from the ground up, make sure you don't fall for cheap imitations that suffer from feature bloat!

YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  Version 1.5.3 Is Released « previous next »
Pages: [1] 2 3 ... 6 Reply Ignore Print
Author Topic: Version 1.5.3 Is Released  (Read 187740 times)
David
Destroyer Dave
Global Moderator
YaBB God
*****
Posts: 5761


I'm not a llama!

WWW
Version 1.5.3 Is Released
« on: May 20, 2003, 03:59:04 PM »
Reply with quote

Version 1.5.3 contains a fix to a security risk to those servers with magic_quotes_gpc turned off.  It currently is not publicized on any security sites and was found internally by Christian Land.  Even though this vulnerability does not effect every server we reccomend you treat it as a required upgrade.  Due to how small of a fix this is, all mods for 1.5.2 should work with it.

If you are upgrading from 1.5.2 please use the update package or mod.

All files can be found here on SourceForge.
https://sourceforge.net/project/showfiles.php?group_id=57105&release_id=160574

And a YaBBpak version of this update can be found at:
http://www.yabbse.org/packages/bugs
« Last Edit: May 21, 2003, 12:52:01 AM by David » Logged

acf [delete me]!
YaBB God
*****
Posts: 521


la especialidad de grafic

WWW
Re:Version 1.5.3 Is Released
« Reply #1 on: May 20, 2003, 04:34:53 PM »
Reply with quote

pluging holes again or you keeping us busy  ;)

good job!
Logged

klumy
Sr. Member
****
Posts: 432


Re:Version 1.5.3 Is Released
« Reply #2 on: May 20, 2003, 05:36:38 PM »
Reply with quote

Good job.

Thanks to everyone who works on it ;)
Logged
luisr
Full Member
***
Posts: 120


Left blank to save space.

Re:Version 1.5.3 Is Released
« Reply #3 on: May 20, 2003, 05:47:54 PM »
Reply with quote

Once again, I just install the latest version and a new one comes out.   ???

Could you post an upgrade package containing just the modified modules to be installed over the existing installation?  Fortunately my installation is still untouched because I just installed 1.5.2 today and I have not yet transferred the old live board to this one.
Logged
Daniel D.
Mod Team
YaBB God
*****
Posts: 2935


Re:Version 1.5.3 Is Released
« Reply #4 on: May 20, 2003, 05:50:48 PM »
Reply with quote

Didn't you look at the download page ? There is a BoardMod update for example...
Logged

David
Destroyer Dave
Global Moderator
YaBB God
*****
Posts: 5761


I'm not a llama!

WWW
Re:Version 1.5.3 Is Released
« Reply #5 on: May 20, 2003, 06:02:57 PM »
Reply with quote

Quote from: luisr on May 20, 2003, 05:47:54 PM
Could you post an upgrade package containing just the modified modules to be installed over the existing installation?  Fortunately my installation is still untouched because I just installed 1.5.2 today and I have not yet transferred the old live board to this one.
As Daniel pointed out, you can either use the Boardmod file or the update package.  The mod file only edits the two files, the update package only contains the two new files.
Logged

luisr
Full Member
***
Posts: 120


Left blank to save space.

Re:Version 1.5.3 Is Released
« Reply #6 on: May 20, 2003, 06:20:17 PM »
Reply with quote

I don't see a 1.5.3 update package in the download page.
Logged
Spaceman-Spiff
Mod Team
YaBB God
*****
Posts: 3689


My $txt[228]

Re:Version 1.5.3 Is Released
« Reply #7 on: May 20, 2003, 06:25:29 PM »
Reply with quote

Quote from: luisr on May 20, 2003, 06:20:17 PM
I don't see a 1.5.3 update package in the download page.
check the link in the first post ;)
Logged

   My mods, ysePak, codes, tutorials
    Support question IMs = bad.
Ben_S
Disciple of Joe
Support Team
YaBB God
*****
Posts: 1586


I Love YaBB SE!

WWW
Re:Version 1.5.3 Is Released
« Reply #8 on: May 20, 2003, 06:25:40 PM »
Reply with quote

http://prdownloads.sourceforge.net/yabbse/yabbse_1-5-3_update.mod?download
Logged
luisr
Full Member
***
Posts: 120


Left blank to save space.

Re:Version 1.5.3 Is Released
« Reply #9 on: May 20, 2003, 06:30:15 PM »
Reply with quote

Thanks
Logged
I, Brian
Full Member
***
Posts: 238


It is coming...

WWW
Re:Version 1.5.3 Is Released
« Reply #10 on: May 20, 2003, 07:20:39 PM »
Reply with quote

On the one hand, it's disappointing that there's *yet another* security fix for YaBB SE. :(

On the other hand, it's very gratifying to know that YaBB SE are so on the ball with regards to possible secuity issues. :)

Because I know what being hacked is like - and the damage it can cause - I am very grateful for security fixes. :)
Logged

Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!

WWW
Re:Version 1.5.3 Is Released
« Reply #11 on: May 20, 2003, 07:57:52 PM »
Reply with quote

The majority of the holes we have been fixing lately are ones that are also exploitable on other forum packages as well (and you'll see that in security sites).

Someone finds it on one and tries it on them all. Least we can do is keep on the ball for the users :)
Logged

old dan
Full Member
***
Posts: 191


Make music, not war.

WWW
Re:Version 1.5.3 Is Released
« Reply #12 on: May 20, 2003, 08:52:05 PM »
Reply with quote

good work folks. One tiny quibble, in the boardmod file it says, "fixes one last security hole". Not putting you down or complaing as you do a great job keeping on top of things but saying that is kinda like the scout that told Custer, "there aren't any Indians for a hundred miles". Whenever you allow anonymous access to your web server you open yourself up to security issues.

good to see you're on top of things. :)

Logged

People who drink lite beer don't like the taste of beer; they just like to pee a lot
Thomas
Full Member
***
Posts: 203


WWW
Re:Version 1.5.3 Is Released
« Reply #13 on: May 20, 2003, 09:13:31 PM »
Reply with quote

Hi

I cant download the mod. I get 404 error on every mirror site.

/MR.T
Logged
skoen
Longing For a Title
YaBB God
*****
Posts: 601


Official translator and local mod.

ICQ - 164554802hoyreskoen@hotmail.com WWW
Re:Version 1.5.3 Is Released
« Reply #14 on: May 20, 2003, 09:16:40 PM »
Reply with quote

It's in fact easier to download the zip file of the update and upload the two files to your YaBBSE directory. That way, you won't lose any of your existing mods or settings. I've done this now, both with the updates pre-1.5.1 final and until now. Will in fact do the same when 1.6.0 arrives. My host only allowed me to install YSE1.4.1 and upgrade to now 1.5.3.
Logged

Proud to be Norwegian

Feel free to send me an IM if you got any questions or comments regarding YabbSE or my translation.

My portfolio(Norwegian)

Caught 43 llamas.
Pages: [1] 2 3 ... 6 Reply Ignore Print 
YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  Version 1.5.3 Is Released « previous - next »
 


Powered by MySQL Powered by PHP YaBB SE Community | Powered by YaBB SE
© 2001-2003, YaBB SE Dev Team. All Rights Reserved.
SMF 2.1.4 © 2023, Simple Machines
Valid XHTML 1.0! Valid CSS

Page created in 0.019 seconds with 19 queries.