ข่าว vBulletin 5.6.4, 5.6.3, 5.6.2 Security Patch Release.

A security issue has been reported to the vBulletin team. To fix this issue, we have created a new security patch.

You can download the patch for your version in the Member's Area

We have made patches available for the following versions of vBulletin Connect:

• 5.6.4 PL1
• 5.6.3 PL1
• 5.6.2 PL2

Installing the Patch​

For the best results with your vBulletin site, it is recommended to upgrade to vBulletin 5.6.4 PL1 if you are not using 5.6.4 currently.

1. Download the appropriate files for your version of vBulletin 5.6.X
2. Upload all files found within the zip file to your server. Make sure to overwrite the existing files on your server.
3. Run the upgrade scripts included in the patch on your server. (/core/install/upgrade.php)
4. When the upgrade process ends, delete the /core/install directory from your server.

Older Versions​

All older versions should be considered vulnerable. Sites running older versions of vBulletin need to be upgraded to vBulletin 5.6.4 as soon as possible. For more information on upgrading please see Quick Overview: Upgrading vBulletin Connect in the support forums.

vBulletin Cloud​

vBulletin Cloud sites have been patched.

 

[thxf.org]

PHAR Downloads and the Patch

The Patch system doesn't currently understand PHAR files. It isn't used often and the PHAR file download is newer. In order to completely patch your site when using PHAR, please download the complete vBulletin 5.6.4 PL1 package from the Member's Area. Upload the /core/vb directory to your server. If you have already uploaded the rest of the patch files and run the upgrade script, then you do not need to do anything else.

If you are not running vBulletin 5.6.4, you can see if you're using PHAR by going to /core/vb on your server. If there is a file named vb.phar, then you're using PHAR.

We will be working to make the patching system more intelligent so PHAR builds are made if it is needed in the future.