Floris
April 27th, 2005, 01:00 PM
vBulletin version 2.3.7 - Security Release - (upgrade!)
The discovery of a potentially security hole has necessitated the release of vBulletin 2.3.7. All customers are strongly encouraged to take one of the actions described in this post.
vBulletin 2.3.7 is a security fix release. If you are running vBulletin 2.3.6 or older, we recommend you upgrade to 2.3.7 or 3.0.7 as soon as possible; if this is not possible, you can simply use the updated global.php and search.php from this version to obtain the security fix. You should use these files to overwrite the files of the same name in your main vBulletin directory.
vBulletin 3 is not affected by the problems fixed in this release.
Please be sure to check your backups, that they are complete before continuing with an upgrade. We had reports that PHP was causing time out errors when creating the back up SQL, and this was causing for incomplete or corrupted backups. The safest way to do a backup is to use the mysqldump utility through telnet, as it will not suffer from any such problems. Full instructions for backing up your database are available in the vBulletin 3 Manual (http://www.vbulletin.com/docs/html/manual_database_backup).
The Full Announcement (http://www.vbulletin.com/forum/showthread.php?t=137309) has more details about this release, also read that!
You can discuss this announcement here (http://www.vbulletin-fans.com/showthread.php?t=10039)
Floris & Staff
The discovery of a potentially security hole has necessitated the release of vBulletin 2.3.7. All customers are strongly encouraged to take one of the actions described in this post.
vBulletin 2.3.7 is a security fix release. If you are running vBulletin 2.3.6 or older, we recommend you upgrade to 2.3.7 or 3.0.7 as soon as possible; if this is not possible, you can simply use the updated global.php and search.php from this version to obtain the security fix. You should use these files to overwrite the files of the same name in your main vBulletin directory.
vBulletin 3 is not affected by the problems fixed in this release.
Please be sure to check your backups, that they are complete before continuing with an upgrade. We had reports that PHP was causing time out errors when creating the back up SQL, and this was causing for incomplete or corrupted backups. The safest way to do a backup is to use the mysqldump utility through telnet, as it will not suffer from any such problems. Full instructions for backing up your database are available in the vBulletin 3 Manual (http://www.vbulletin.com/docs/html/manual_database_backup).
The Full Announcement (http://www.vbulletin.com/forum/showthread.php?t=137309) has more details about this release, also read that!
You can discuss this announcement here (http://www.vbulletin-fans.com/showthread.php?t=10039)
Floris & Staff