mainframe.board
Board => Support => Thema gestartet von: mf|Gosh am Mittwoch, 06. Februar 2013, 23:07
-
Guten Abend werte User
Heute Abend gabs wieder ein kleines Update bei unserer Board-Software. Der Versionssprung ist wiederum ziemlich klein, da es sich lediglich um ein Bugfix- und Security-Release handelt.
Das Changelog zum Update:
SMF 2.0.4 Febuary 1 2013
=============================================================================
January 2013
-----------------------------------------------------------------------------
! Joshua's fix for validatePasswordFlood logic error (reported by Raz0r)
! Arantor fix for database error on lost connections
! Quick fix for Admin Password Reset vulnerability reported by Raz0r
! Directory traversal vulnerability in the function ViewFile (thanks yan.uniko.102 for reporting and Arantor for proposing the fix and Spuds for spotting the undefined variable)
! active users cannot change anymore the email from action activate without deactivation/confirmation (thanks BarteX for reporting the issueand suggesting a fix)
! Change language from the admin panel could allow XSS, path disclosure and code injection (thanks Jakub Galczyk for reporting the issue)
! Missing arguments in SSI functions called through ?ssi= generated error messages showing full server file path (thanks yan.uniko.102 for reporting it)
! Directory listing and editing of arbitrary files from the theme editing page in the admin panel
Legend:
-----------------------------------------------------------------------------
! Minor change or bugfix. (don't bother to log typos except between releases.)
* Change like above, but affects templates.
& Change that affects a language file. (make two if it affects templates too.)
+ Feature addition or improvement.
- Feature or option removal.
Falls ihr Fragen habt oder irgendwo auf Fehler oder Berechtigungsprobleme stösst, dürft ihr euch natürlich gerne hier melden.
Cheers!
Gosh