SMF 2.0.2 and 1.1.16 critical security patches released

[ApplianceJunk]

Updated to 2.0.2 without out any problems, thanks

[LiroyvH]

The download problems SHOULD be solved now.
My apologies for any inconvenience. Enjoy!

[tragidy]

The download problems SHOULD be solved now.
My apologies for any inconvenience. Enjoy!

On SMF 1.1.15

The package you are trying to download or install is either corrupt or not compatible with this version of SMF.

Is there a server-side cache that should be flushed on my end now?

[Argonaut]

If there's anybody who still has a problem with upgrading to 1.1.16

An Error Has Occurred!
The package you are trying to download or install is either corrupt or not compatible with this version of SMF.

Please see this thread:

www.simplemachines.org/community/index.php?topic=463108.0 (Error when trying to upgrade 1.1.15 to 1.1.16)

[LiroyvH]

This is from the package manger, right?
Not from the manual update package that you can find here?

-edit-
Nevermind, reading the thread now.

[omidkosari]

No . i can not install even manually .

[nwsw]

In  reviewing the changes for SMF 1.1.16, and I find myself wondering what this change is supposed to do:

Code Select Expand


if (isset($GLOBALS[$variable]))
unset($GLOBALS[$variable], $GLOBALS[$variable]);


The changelog for 2.0.2 says this:

Make sure db_character_set doesn't end up set when it shouldn't be. (index.php)

I do not understand how the double unset will do much of anything. Perhaps this is just a quirk of PHP and unset of $GLOBALS that this code is intended to work around...

Update: Never mind...I found the exploit and the need for this with older PHP installs.

[billis_2]

Updated to 2.0.2 without out any problems.
Good work,
Thanks.

[cebu]

updated my 2.0.1 forum to 2.0.2 without any problem.

for my 1.1.15 forum, since its giving error when trying to install through package manager, i did a manual update and everything went through as well.

[LAVX6]

great thnx

[Adrek]

Update for SMF 2.0.1 contains fix for problems with downloading attachments by FF?

and this is fixed in this patch?

Hi there,

in the Changelog (http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-1_changelog.txt) is written:

! A sensitive token was sent in the URL, allowing CSRF vulnerability (Subs-Menu.php)

But comparing Subs-Menu.php of version 2.0 and 2.0.1 does not show any differences except the @version-Line.

Was the bug already fixed in 2.0 or have you missed to replace the files correctly?

Thanks for information!

Update: Since 2.0 RC4 is no change (except a comment) done in Sources/Subs-Menu.php

[islam2hamy]

Thanks for update.

[Mr. Jinx]

Thnx. Upgrade went fine!

[Nolt]

Update went smooth and without any problems, but in Admin section I have:

Installed version: 2.0.2
Newest version: 2.0.1

I've installed via package manager because I didn't had notification link about new version.

[GlitchPC]

Update went smooth and without any problems, but in Admin section I have:

Installed version: 2.0.2
Newest version: 2.0.1

I've installed via package manager because I didn't had notification link about new version.

run the fetch simple machine files from scheduled tasks

[Adish - (F.L.A.M.E.R)]

Good work team!! Well done. :-)

[cerbopoli]

I get this error: You cannot download or install new packages because the Packages directory or one of the files in it are not writable! 

Yet all of my appropriate folders are set Writable (777).  Any ideas how I can remedy this?

[w0kie]

1.1.16 auto update worked perfectly on my board.   

[LiroyvH]

I get this error: You cannot download or install new packages because the Packages directory or one of the files in it are not writable! 

Yet all of my appropriate folders are set Writable (777).  Any ideas how I can remedy this?

Set the chmod on that folder properly to 777 using FTP or your hosting control panel's file manager.

For any further questions, please do !NOT! use this topic. It is !NOT! for support.
Please ask your question in the support boards.

Thanks

[Illori]

no this patch does not include the fix for downloading attachments in firefox, and PLEASE open separate threads for your issues this thread is not for support.