Announcement

Collapse
No announcement yet.

vBulletin 4.0.2 Patch Level 1 Released

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • vBulletin 4.0.2 Patch Level 1 Released

    An XSS exploit has been discovered in 4.0.1 and 4.0.2. We strongly recommend that anyone running these versions immediately patch their systems.

    If you are running 4.0.2 already, simply download the latest Security patch: 4.0.2 Suite PL1 from the Patches section in the Members Area, extract the 5 patch files, then upload these files making sure to overwriting the existing files. This will update your version to the latest patch release. The patch files are:

    includes/class_core.php
    includes/functions_forumdisplay.php
    includes/functions.php
    includes/version_vbulletin.php
    vb/legacy/thread.php

    If you are running 4.0.1, you will need to do a full upgrade to 4.0.2 PL1 (available in the Members Area.) Just download the latest release and upgrade normally.
    Last edited by Trevor Hannant; Mon 22nd Feb '10, 11:11pm.
    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
    Change CKEditor Colors to Match Style (for 4.1.4 and above)

    Steve Machol Photography


    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X