ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!
Home
Upgrade
Credits
Help
Search
Awards
Achievements
 10295

Xenforo 2.1.12 + Patch

by OwenC137 - 02-10-2021 - 02:14 AM
#1
Xenforo 2.1.12 + Patch


Download: 
Hidden Content
You must register or login to view this content.



Spoiler Show
 
we are releasing XenForo 2.1.12 to address two potential security vulnerabilities. We strongly recommend that all customers running XenForo 2.1 upgrade to 2.1.12 or use the attached patch file as soon as possible.

The issues are XSS vulnerabilities. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.

XenForo extends thanks to security researcher Vincent ibn Winnie for reporting the issues.

We recommend doing a full upgrade to resolve the issues, but a patch can be applied manually. See below for further details.

If you are currently running 2.1, the automatic upgrade check will now allow you to upgrade to 2.1.12 within your control panel. Once you are running the latest 2.1 release, it will report that an upgrade to 2.2 is available. If you would like to upgrade to 2.1.12 and the control panel reports that 2.2.0 is available, you may manually check for upgrades via Tools > Check for upgrades.

Please be aware that XenForo 2.0 is no longer supported or receiving security updates. We strongly recommend that customers running 2.0 upgrade to the current version.
Applying a patch manually

Download the 2112patch.zip file attached to this message. It will contain the following file:

  1. src/XF/BbCode/Renderer/Html.php
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report this file as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.

As always, new releases of XenForo are free to download for all customers with active licenses, who may now grab the new version from the customer area or upgrade from your Admin control panel (Tools > Check for upgrades...).

Reply
#2
LEts go, i really wanted this.
Reply
#3
Nice ngl been waiting
Reply
#4
I really hope this sh works man fr fr :)_
Reply
#5
(02-10-2021 - 02:14 AM)OwenC137 Wrote: Xenforo 2.1.12 + Patch


Download: 
Hidden Content
You must register or login to view this content.



Spoiler Show
 
we are releasing XenForo 2.1.12 to address two potential security vulnerabilities. We strongly recommend that all customers running XenForo 2.1 upgrade to 2.1.12 or use the attached patch file as soon as possible.

The issues are XSS vulnerabilities. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.

XenForo extends thanks to security researcher Vincent ibn Winnie for reporting the issues.

We recommend doing a full upgrade to resolve the issues, but a patch can be applied manually. See below for further details.

If you are currently running 2.1, the automatic upgrade check will now allow you to upgrade to 2.1.12 within your control panel. Once you are running the latest 2.1 release, it will report that an upgrade to 2.2 is available. If you would like to upgrade to 2.1.12 and the control panel reports that 2.2.0 is available, you may manually check for upgrades via Tools > Check for upgrades.

Please be aware that XenForo 2.0 is no longer supported or receiving security updates. We strongly recommend that customers running 2.0 upgrade to the current version.
Applying a patch manually

Download the 2112patch.zip file attached to this message. It will contain the following file:

  1. src/XF/BbCode/Renderer/Html.php
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report this file as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.

As always, new releases of XenForo are free to download for all customers with active licenses, who may now grab the new version from the customer area or upgrade from your Admin control panel (Tools > Check for upgrades...).

Appreciate the post man, super nice!

Edit: links are dead, big sad :(
Reply
#6
Thanks you broooo
Reply

Users browsing: 2 Guest(s)