vBulletin Security Patch for vBulletin 3.8.7 & 4.0 - 4.2 (Suite & Forum) - 06/07/2012

Discussion in 'vBulletin Discussions' started by News Bot, Jun 7, 2012.

  1. News Bot

    News Bot Regular Member

    Joined:
    Apr 28, 2011
    Messages:
    429
    Likes Received:
    63
    Location:
    Cyber Space
    A recent vBulletin report indicated that there was a potential exploit vector in flood protection. Once the cause of the issue was isolated, code changes were made to eliminate the reported threat.

    This issue affects BOTH vBulletin 3 and vBulletin 4 (Suite & Forum).

    A patch has been issued for vBulletin 3.8.7 through 4.2.

    To improve the security of your vBulletin 4 installation, please download the patch from the members area of vBulletin: http://members.vbulletin.com/

    The standard upgrade process for a patch level release is:

    1. Download the patch for the version of vBulletin you're currently running from https://members.vbulletin.com/patches.php.
    2. Extract the vBulletin patch files from the zip file.
    3. Upload the patch files to your server, overwriting the old files.


    Advanced Users:

    Files updated in the patch for vBulletin 3.8.7 * 4.0 - 4.1.12 (Suite & Forum).

    • includes/class_dm_threadpost.php
    • includes/class_floodcheck.php
    • includes/version_vbulletin.php


    Files updated in the patch for vBulletin 4.2 (Suite & Forum).

    • includes/adminfunctions.php
    • includes/class_dm_threadpost.php
    • includes/class_floodcheck.php
    • includes/class_upgrade_420a1.php
    • install/init.php
    • install/mysql-schema.php
    • vb/activitystream/populate/forum/thread.php
    • includes/version_vbulletin.php


    Licensed customers can discuss the security patch - HERE

    Continue reading...
     
  2. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
    Jesus... I just upgraded a few sites to 4.2
    now I get to contact those clients to let them know they need to upgrade again..
     
  3. Carlos

    Carlos Regular Member

    Joined:
    Apr 20, 2003
    Messages:
    751
    Likes Received:
    251
    Location:
    California
    *Sigh* Oh vBulletin, when will you ever learn.....
     
  4. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
    at least they are issuing patches :)

    but it always happens right after I update a site..lol
     

Share This Page