Quick Login   
 
Register AdminFusion Tutorials Post Fusion Forum Matrix
 
Go Back AdminFusion » Software & Tech » Software » phpBB » [phpBB News] phpBB 3.1.11 Release - Please Update
Reply
 
Old 08-10-2017, 04:22 AM   #1
Industry News 

Industry News is offline

Title: Forum Guru

Feedback Score: 0 reviews

Join Date: Sep 2005

Posts: 9,206

Industry News is on a distinguished road
 
 
Post [phpBB News] phpBB 3.1.11 Release - Please Update

Greetings everyone,<br>
<br>
We are pleased to announce the release of phpBB 3.1.11 "Bertie's Cassini hitchhike". This version is a maintenance & security release of the 3.1.x branch which fixes three security issues, as well as adding more hardening and fixes for various bugs reported in previous versions.<br>
A server-side request forgery (SSRF) exploit was discovered in the remote avatar functionality which could be used to perform service discovery on internal and external networks as well as retrieve images which are usually restricted to local access (thanks to SEC Consult for the report). Additionally, a cross-site scripting vulnerability via version check files was discovered internally (thanks Derk Ruitenbeek). This could have been used to trick users into clicking on <span style="font-style: italic">javascript:</span> links. The third fixed issue concerned potential high load scenarios that could be caused by specially crafted search queries while using MySQL fulltext search.<br>
<span style="font-weight: bold">Please note that this is the last maintenance release for phpBB 3.1 as it has now reached end of maintenance (EOM). It will continue to receive security updates until December 2017.</span><br>
<br>
The bugfixes address issues with duplicate entries for migrations that could result in extensions not properly installing or uninstalling, an invalid definition in an SQL query that prevents ordering of PMs, as well as issues with updating from earlier versions using PostgreSQL.<br>
Notable changes are pagination for IP tables and post info and added search indexing for topics after splitting a topic. The version check now also supports branches which will result in more helpful information about new versions on other branches.<br>
<br>
The full list of changes is available in the changelog file within the docs folder contained in the release package. You can find the key highlights of this release on the wiki at <a href="https://wiki.phpbb.com/Release_Highlights/3.1.11" class="postlink">https://wiki.phpbb.com/Release_Highlights/3.1.11</a> and a list of all issues fixed on our tracker at <a href="https://tracker.phpbb.com/issues/?filter=14092" class="postlink">https://tracker.phpbb.com/issues/?filter=14092</a><br>
<br>
<span style="font-weight: bold">The packages can be downloaded from our <a href="https://www.phpbb.com/downloads/3.1/" class="postlink">downloads page</a>.</span><br>
<br>
The development team thanks everyone who contributed code to this release: javiexin, Jakub Senko, rxu, Matt Friedman, Rubén Calvo, Daniel Sinn, kasimi, Erwan Nader, nomind60s, Victor A. Safronov, Daniel Mota, David Colón, Jmz, david63, hanakin, Christian Schnegelberger, Jim Mossing Holsteyn, Joas Schilling, MIkhail Gulyaev, Michael Cullum, Mukesh Kumar Kharita, Richard McGirr, TarantinoMariachi, hubaishan, lavigor, upstrocker<br>
<br>
If you have any questions or comments, we'll be happy to address them in the <a href="https://www.phpbb.com/community/viewtopic.php?f=64&t=2430936" class="postlink">discussion topic</a>.<br>
<br>
- The phpBB Team

More...
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

 
Posting Rules
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
[phpBB News] phpBB 3.1.11 Release - Please Update Industry News phpBB 0 07-18-2017 11:41 AM
[phpBB News] phpBB 3.0.6 Release Candidate 3 released Industry News phpBB 1 10-16-2009 12:58 AM
[phpBB News] phpBB 3.0.6 Release Candidate 1 released Industry News phpBB 1 09-17-2009 05:12 AM
[phpBB News] phpBB 3.0.6 Release Candidate 1 released Industry News phpBB 0 09-12-2009 07:47 PM
[phpBB News] phpBB 3.0.6 Release Candidate 1 released Industry News phpBB 0 09-12-2009 06:53 PM

AdminFusion

All times are GMT +1. The time now is 01:34 AM. Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.

© 2016 AdminFusion | Advertisers | Investors | Legal | A member of the Crowdgather Forum Community
 
From:
Title:
Inactive Reminders By Mished.co.uk and FTP-Anime.com