Please note that we’ve extended support period for MyBB 1.6 to give you additional time for upgrading your forum until 1st of October 2015. It fixes 1 medium risk and 3 low risk vulnerabilities. MyBB 1.6.18 is now available from the MyBB website. If you think you’ve found a vulnerability in MyBB, we advise you not to publicly post it on these forums or publicly release information about it elsewhere until we’ve had time to prepare and release a patch.Īs always, you can send through security related messages on the MyBB website from the Contact Us page or in our Private Inquiries forum – where you can start a new thread that only you and the MyBB Team can see.
Download and use the Changed Files Package (MD5: 1fa6a941ba49c6e5308bc74a16f6c09f).There are changes to 7 language files and 19 templates were changed or added. To upgrade, follow the Upgrading process.
#Winebottler 1.8.6 stable upgrade#
If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete. Upgrading from 1.8.5 and Other Versionsīefore performing any upgrade please remember to backup your forum’s files and database and store them safely. Please note, that you do need to run the upgrade script for this version.
Please view the 1.8.6 changes on the Docs site for more information about the changes in this version.
#Winebottler 1.8.6 stable full#
Low Risk: Possible Full Path Disclosure in publicly accessible error log files – reported by Devilshakerz.Low Risk: Possible XSS issues in old upgrade files – reported by FooBar123.Low Risk: Possible XSS Injection in the error handler – reported by FooBar123.Low Risk: SQL Injection in Grouppromotions module (ACP) – reported by Devilshakerz.Medium Risk: Forum password bypass in xmlhttp.php – reported by Devilshakerz.Please be aware that not all issues have been fixed in this version in order to provide easy to manage updates. This release fixes 5 security vulnerabilities and 51 reported issues causing incorrect functionality of MyBB. MyBB 1.8.6 is now available from the MyBB website, and is a security and maintenance release. MyBB 1.8.6 – Security & Maintenance Release
0 kommentar(er)
