Version 1.5.4 Is Released

[David]

If you already did the UPDATE just do the UPGRADE over it, and run upgrade.php.

[waldo]

the "update" i downloaded contains full files of index, instantmessage, blahblahblah.. where's the mod file?

the yabbpak wouldn't work.. got an error when installing the file that comes before the modification to the Sources.. now I can't get it to come up again..

blarg

[BiErLeEuW]

yabbse_1-5-4_update from 1.5.3 is something like replacing? isn't it?

But are Mods working then or must the mods new re-installed?

[amango]

Why isn't there a BoadMod-file to upgrade like 1.52 was?

[waldo]

Why isn't there a BoadMod-file to upgrade like 1.52 was?

thats what I am asking, so yeah, where is one?

[Coyote]

Thanks for another fine security patch

[Overseer]

Why isn't there a BoadMod-file to upgrade like 1.52 was?

thats what I am asking, so yeah, where is one?

uh there is one...


and I got the email too this time

[chris]

I know there is nothing like that ... but I meant major security bugs-free release ... I wouldn't care for minor bugs ...

Like [unknown] said. The last few holes were found by Team-Members while going through the code over and over again. Some of the holes we found would only be relevant to a very, very small minority because they needed PHP to be configured quite "badly" (magic_quotes_gpc=off/register globals=on, ...). Some of the holes could be exploited by people with a little bit of knowledge. Just see it that way: we do the best to fix those holes as soon as they are found and we keep our community informed.

There was no "need" for us to release either 1.5.3/1.5.4 because all problems in those versions were not public. We did it anyway, because we want to make sure that using YaBB SE is a safe thing to do... we could just have said "Hey, nobody knows about those problems, just lets ignore them until someone publishes them --- less work for us" ... but that just isn't the way we handle things

[oscar2001]

Good work people

[Purple Raine]

Great work guys.

I got the notification.

No software is bug-free... someone will always find a hole in it... the key is to have a team that is readily available to plug them holes... and this (1.5.4) is a good example of the hole-pluggers doing a great job.

[Ben_S]

Definitely. And I don't believe that there is another community out there as vibrant as the YaBBSE community. At least issues get addressed with YaBBSE -- and *quick*.

So quick in fact that I believe these are undiscovered holes that were discovered by the YSE team and patched before the dodgy characters discovered them.

[edit]
doh - should read the whole thread first
[/edit]

[QM]

I have 1.5.1 but on trying the link, to upgrade to 1.5.4 it apparently is not on the server

Got the update email fine thanks , Can't comment any further as I can't download it

[Ben_S]

try a different mirror, it wont have propagated to the mirror you tried yet

[DickBarton]

I can't upgrade...when I go to Apply the Mod, I get this instead -

2: fopen("./Packages/modification.mod", "wb") - Permission denied
(/home/sites/sitex/web/yabbse/Sources/Packer.php ln 119)

Anyone got any ideas? I'm sure it's a permissions thing, but I've no idea what the permissions should be set to.

Thanks for any advice,

Richard.

[[Unknown]]

Why isn't there a BoadMod-file to upgrade like 1.52 was?

http://prdownloads.sourceforge.net/yabbse/yabbse_1-5-4_update.mod?download

There is one...

-[Unknown]