EL PaperBoy
Well-known member
- #1
Thread Owner:
EL PaperBoy
<p>A security issue has been reported to the vBulletin team. To fix this issue, we have created a new security patch.</p>
<p>You can download the patch for your version in the <a href="http://members.vbulletin.com/patches.php">Member's Area</a></p>
<p>We have made patches available for the following versions of vBulletin Connect:</p>
<ul>
<li>5.6.9 PL1</li>
<li>5.6.8 PL1</li>
<li>5.6.7 PL1</li>
</ul>
<p>vBulletin 5.7.0 RC 2 has been made available with this patch.</p>
<h2>Installing the Patch</h2>
<p>For the best results with your vBulletin site, it is recommended to upgrade to vBulletin 5.6.9 PL1 if you are not using 5.6.9 currently.</p>
<h3>Using PHAR (default download)</h3>
<p>Due to the PHAR download, you will need to download the complete vBulletin package for your version and replace the /core/vb/vb.phar file to apply the security fix. This file will show up as a false positive in your Suspect File Diagnostics. If you replace all files from the new download, then the false positive will not occur.</p>
<h3>Patching</h3>
<ol>
<li>Download the appropriate files for your version of vBulletin 5.6.X</li>
<li>Upload all files found within the zip file to your server. Make sure to overwrite the existing files on your server.</li>
<li>When the upgrade process ends, delete the <code>/core/install</code> directory from your server.</li>
</ol>
<h2>Older Versions</h2>
<p>All older versions should be considered vulnerable. Sites running older versions of vBulletin need to be upgraded to vBulletin 5.6.9 PL1 as soon as possible. For more information on upgrading please see <a href="https://forum.vbulletin.com/node/4391346">Quick Overview: Upgrading vBulletin Connect</a> in the support forums.</p>
<h2>vBulletin Cloud</h2>
<p>vBulletin Cloud sites have been patched.</p>
Continue reading...
<p>You can download the patch for your version in the <a href="http://members.vbulletin.com/patches.php">Member's Area</a></p>
<p>We have made patches available for the following versions of vBulletin Connect:</p>
<ul>
<li>5.6.9 PL1</li>
<li>5.6.8 PL1</li>
<li>5.6.7 PL1</li>
</ul>
<p>vBulletin 5.7.0 RC 2 has been made available with this patch.</p>
<h2>Installing the Patch</h2>
<p>For the best results with your vBulletin site, it is recommended to upgrade to vBulletin 5.6.9 PL1 if you are not using 5.6.9 currently.</p>
<h3>Using PHAR (default download)</h3>
<p>Due to the PHAR download, you will need to download the complete vBulletin package for your version and replace the /core/vb/vb.phar file to apply the security fix. This file will show up as a false positive in your Suspect File Diagnostics. If you replace all files from the new download, then the false positive will not occur.</p>
<h3>Patching</h3>
<ol>
<li>Download the appropriate files for your version of vBulletin 5.6.X</li>
<li>Upload all files found within the zip file to your server. Make sure to overwrite the existing files on your server.</li>
<li>When the upgrade process ends, delete the <code>/core/install</code> directory from your server.</li>
</ol>
<h2>Older Versions</h2>
<p>All older versions should be considered vulnerable. Sites running older versions of vBulletin need to be upgraded to vBulletin 5.6.9 PL1 as soon as possible. For more information on upgrading please see <a href="https://forum.vbulletin.com/node/4391346">Quick Overview: Upgrading vBulletin Connect</a> in the support forums.</p>
<h2>vBulletin Cloud</h2>
<p>vBulletin Cloud sites have been patched.</p>
Continue reading...
