Vbulltens update

[NMBleach]

http://www.bbc.co.uk/news/technology-10714192

i saw this today and also find your running forums are run be vBultens software, have you (Aria) updated ?

[DoubleTop]

we are safe, the exploit was in the update released on the 15th that we did not deploy. The update with the error in has since been removed and once I've checked the new replacement patch we'll deploy. The change log between the versions 3.8.5 and 3.8.6 didn't give me any palputations so I did what I normally tend to unless they are a security patch - ignored it and made a cup of tea

DT.

[Toonshorty]

This is why Aria should use IBP 3

[marsey99]

cough*4.x*cough

[DoubleTop]

I tell you what, let's all jump on vbulletin for making a mistake, announcing the mistake publically and then fixing it inside 3days shall we <sigh>

MS have an entire database of security vunerabilites that they know about within the product range.

at the end of the day, we are not affected here and that's the most important part.

DT.

[Mr Banana]

I tell you what, let's all jump on vbulletin for making a mistake, announcing the mistake publically and then fixing it inside 3days shall we <SIGH>

MS have an entire database of security vunerabilites that they know about within the product range.

at the end of the day, we are not affected here and that's the most important part.

DT.

This that article is stupid with the comment from that guy.

Wow one whole security issue that people only affected by it are the people who installed it...another reason to wait until you update.

Although i hope eventually it's updated to 4.x here, outdated software bugs me

[DoubleTop]

there's a plan forming about the upgrade, vb4 has many options, an entire publishing suite or just forums.

Discussion have been had most of this week between jHorner and I

DT.

[Mr Banana]

there's a plan forming about the upgrade, vb4 has many options, an entire publishing suite or just forums.

Discussion have been had most of this week between jHorner and I

DT.

Wooo nice one dude, will make us much more of a community then

[DoubleTop]

tbh, although there are some newer features, most of them on initial deploy will be turned off there's already a load of stuff in vb3 we can't give access to with what resources we have

DT.

[Mr Banana]

tbh, although there are some newer features, most of them on initial deploy will be turned off there's already a load of stuff in vb3 we can't give access to with what resources we have

DT.

Really? Like what?

[DoubleTop]

albums, social groups ... just no need for them really and not a great implementation if I'm very honest. I don't think I've come across a single board that uses either.

DT.

[Snakedoc]

Lol I know one. It's not a "proper" forum though.

[marsey99]

i think they should be applauded for this, they didnt hide from the fact and also still supporting 3 now 4 is out.

[Aaron]

This is why Aria should use IBP 3

If you mean IPB and not IBP, I assure you they are not immune from mistakes.. I am an admin on a couple of other boards which use IPB, and we had major problems with security flaws that were introduced with some updates.

Unfortunately, they never released a fix. Well - technically, they did. Their fix was "You need to upgrade to Version3". Unfortunately, for everyone who was still running 2.xxx, and hadnt kept up their yearly subscription fees which they charge, it meant buying a whole new licence which costs a bit!