vBulletin Security Patch for vBulletin 4.2 (Suite & Forum) Only - 06/18/2012

Discussion in 'vBulletin Discussions' started by News Bot, Jun 18, 2012.

  1. News Bot

    News Bot Regular Member

    Joined:
    Apr 28, 2011
    Messages:
    429
    Likes Received:
    63
    Location:
    Cyber Space
    A recent vBulletin report indicated that there was a potential XSS exploit vector involving the new Activity Stream. Once the cause of the issue was isolated, code changes were made to eliminate the reported threat.

    This issue affects ONLY vBulletin 4.2 (Suite & Forum).

    A patch has been issued for vBulletin 4.2.

    To improve the security of your vBulletin 4 installation, please download the patch from the members area of vBulletin: http://members.vbulletin.com/

    The standard upgrade process for a patch level release is:

    1. Download the patch for the version of vBulletin you're currently running from https://members.vbulletin.com/patches.php.
    2. Extract the vBulletin patch files from the zip file.
    3. Upload the patch files to your server, overwriting the old files.


    The upgrade.php script does not need to be run.

    Advanced Users:
    Files updated in this patch for vBulletin 4.2 (Suite & Forum).

    • /vb/activitystream/view/perm/calendar/event.php
    • /includes/vbulletin_version.php

    Please note this list does not contain the files changed in vBulletin 4.2 PL1. Only the files changed in vBulletin 4.2 PL2 are listed. However, PL2 also contains all of the changes from PL1.

    Licensed customers can discuss the security patch - HERE

    Continue reading...
     
  2. Brandon

    Brandon Regular Member

    Joined:
    Jun 1, 2009
    Messages:
    6,602
    Likes Received:
    1,706
    Location:
    Topeka, Kansas
    First Name:
    Brandon
    what....

    and the activity stream addon is off to a good start :p
     
  3. Iconic

    Iconic The Original

    Joined:
    Nov 2, 2011
    Messages:
    353
    Likes Received:
    135
    Location:
    Australia
    I hate that this happens a lot. But I am thankful that they patch it so fast.
     
    Brandon likes this.

Share This Page