1 Topic by hcs

  • hcs
  • hcs
  • Administrator
  • Offline
  • Registered: 2006-02-16
  • Posts: 219

Topic: PunBB 1.3.6

PunBB 1.3.6 is released.

This is a critical update. We strongly recommend that you update your forum!

1.3.5 to 1.3.6 changes:

  • Fixed XSS vulnerabilities

  • Fixed error with bans in admin/bans.php and profile.php

  • Fixed invalid closing tag described in issue #32

Compare view: https://github.com/punbb/punbb/compare/1.3.5...1.3.6

Download PunBB 1.3.6: https://github.com/downloads/punbb/punb … -1.3.6.zip

hcs's Website

2 Reply by Emme (edited by Emme 2011-09-18 09:51)

  • Emme
  • Style Creator
  • Offline
  • Registered: 2011-09-15
  • Posts: 9

Re: PunBB 1.3.6

Hotfix for adminpanel soon ?

3 Reply by lie2815 (edited by lie2815 2011-09-18 08:55)

  • From: Germany
  • Registered: 2007-02-14
  • Posts: 644

Re: PunBB 1.3.6

Quote from the original vulnerability report:

[Time-line]

20/08/2011 - Vendor notified
02/09/2011 - No e-mail reply and BAN on Forum
???        - Vendor patch release
16/09/2011 - Public disclosure

Please tell me this is not true!

P.S.: You should also mention that people should definitely upgrade to keep their members and other internet users secure!

FluxBB - v1.4.8

lie2815's Website

4 Reply by hcs

  • hcs
  • hcs
  • Administrator
  • Offline
  • Registered: 2006-02-16
  • Posts: 219

Re: PunBB 1.3.6

lie2815 wrote:

20/08/2011 - Vendor notified
02/09/2011 - No e-mail reply and BAN on Forum
???        - Vendor patch release
16/09/2011 - Public disclosure

Please tell me this is not true!

I have not received any emails about this vulnerability. At the forum there were no reports of this vulnerability and banned only spammers.

hcs's Website

  • From: Germany
  • Registered: 2007-02-14
  • Posts: 644

Re: PunBB 1.3.6

Good smile

FluxBB - v1.4.8

lie2815's Website

6 Reply by lucatony (edited by lucatony 2011-09-18 11:16)

  • From: ESPAÑA
  • Registered: 2011-09-17
  • Posts: 40

Re: PunBB 1.3.6

Are all the extensions of 1.3.5 compatible with the update to 1.3.6 ???

7 Reply by hcs

  • hcs
  • hcs
  • Administrator
  • Offline
  • Registered: 2006-02-16
  • Posts: 219

Re: PunBB 1.3.6

Yes, all styles and extensions is compatible.

hcs's Website

  • From: ESPAÑA
  • Registered: 2011-09-17
  • Posts: 40

Re: PunBB 1.3.6

Thanks , but how I install this new version from 1.3.5 , like this ??

How to upgrade

    make a backup of the database and files;

    turn the Maintenance mode on (via admin panel);

    overwrite old files with new ones;

    after owerwriting, verify that the cache, img/avatars and extensions (for pun_repository) directories have enough write permissions (usually 777);

    clear cache directory;

    go to the forum index and run db_update.php script;

    turn the Maintenance mode off.

Thanks!!

9 Reply by hcs

  • hcs
  • hcs
  • Administrator
  • Offline
  • Registered: 2006-02-16
  • Posts: 219

Re: PunBB 1.3.6

Yes.

hcs's Website

10 Reply by hcs

  • hcs
  • hcs
  • Administrator
  • Offline
  • Registered: 2006-02-16
  • Posts: 219

Re: PunBB 1.3.6

Emme wrote:

Hotfix for adminpanel soon ?

Hotfix ready.

hcs's Website

11 Reply by qie

  • qie
  • Senior Member
  • Offline
  • Registered: 2006-08-26
  • Posts: 185

Re: PunBB 1.3.6

anyone runs punbb1.3 need update asap.

石家庄电脑维修

qie's Website

12 Reply by Diego

  • Registered: 2011-03-17
  • Posts: 18

Re: PunBB 1.3.6

http://punbb.informer.com/download/punbb-1.3.6.zip
and
https://github.com/downloads/punbb/punb … -1.3.6.zip

files have different sizes. which one is better?

13 Reply by hcs

  • hcs
  • hcs
  • Administrator
  • Offline
  • Registered: 2006-02-16
  • Posts: 219

Re: PunBB 1.3.6

Different line end in files after github -> svn transmission. Fixed, thanks.

hcs's Website

14 Reply by md

  • md
  • Junior Member
  • Offline
  • Registered: 2011-05-29
  • Posts: 8

Re: PunBB 1.3.6

is it safe to upgrade to 1.3.6? in currently on 1.3.5 and want to know if its worth the upgrade

15 Reply by hklown (edited by hklown 2011-09-25 04:44)

  • From: New York (The Best State)
  • Registered: 2010-10-27
  • Posts: 152

Re: PunBB 1.3.6

md wrote:

is it safe to upgrade to 1.3.6? in currently on 1.3.5 and want to know if its worth the upgrade

You should probably read the OP at the top of the thread, where it says:

This is a critical update. We strongly recommend that you update your forum!

hklown's Website

16 Reply by md (edited by md 2011-09-25 21:09)

  • md
  • Junior Member
  • Offline
  • Registered: 2011-05-29
  • Posts: 8

Re: PunBB 1.3.6

i ran the update. for some odd reason im still geting the alert that i need to up grade http://imageshack.us/photo/my-images/42 … pdate.png/

17 Reply by hklown

  • From: New York (The Best State)
  • Registered: 2010-10-27
  • Posts: 152

Re: PunBB 1.3.6

Did you run the update_db.php script?

hklown's Website

  • From: Belgium
  • Registered: 2011-10-02
  • Posts: 1

Re: PunBB 1.3.6

my first update, I hope that update works