+ Reply to Thread
Results 1 to 1 of 1

Thread: vBulletin 4.0.2 Patch Level 1 Released

  1. #1
    Customer Support Manager Steve Machol is a splendid one to behold Steve Machol is a splendid one to behold Steve Machol is a splendid one to behold Steve Machol is a splendid one to behold Steve Machol is a splendid one to behold Steve Machol is a splendid one to behold Steve Machol is a splendid one to behold Steve Machol's Avatar
    Join Date
    Jul 2000
    Posts
    143,504

    vBulletin 4.0.2 Patch Level 1 Released

    An XSS exploit has been discovered in 4.0.1 and 4.0.2. We strongly recommend that anyone running these versions immediately patch their systems.

    If you are running 4.0.2 already, simply download the latest Security patch: 4.0.2 Suite PL1 from the Patches section in the Members Area, extract the 5 patch files, then upload these files making sure to overwriting the existing files. This will update your version to the latest patch release. The patch files are:

    includes/class_core.php
    includes/functions_forumdisplay.php
    includes/functions.php
    includes/version_vbulletin.php
    vb/legacy/thread.php

    If you are running 4.0.1, you will need to do a full upgrade to 4.0.2 PL1 (available in the Members Area.) Just download the latest release and upgrade normally.
    Last edited by Trevor Hannant; Tue 23rd Feb '10 at 3:11am.
    Steve Machol, vBulletin Customer Support Manager
    "Have Copy, Will Paste" (when appropriate)

    Please do not email or PM me for vBulletin support. I will be more than glad to answer your questions on the vB Forums and in the support system.

    Just remember that what happens in localhost, stays in localhost.


+ Reply to Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts