Novos vBulletin 3.6.5 e 3.5.8 Released

[Ganondorf]

Estamos orgulhosos em anunciar uma atualização do vBulletin 3.6.5 e 3.5.8

Hoje as 11:40 da manhã acaba de sair do forno as novas atualizações para as versões do vBulletin 3.6.5 e 3.5.7, aqui vão alguns dados sobre as novas atualizações.

Algumas novidades no novo vBulletin 3.6.5

vBulletin 3.6.5

This morning, an exploit was reported, which affects vBulletin versions 3.5.x and 3.6.x. Although the report is inaccurate and the published exploit does not work as claimed unless a highly unlikely set of circumstances exist, it has highlighted a potential security issue in these vBulletin versions.

Therefore, we have decided to release updated versions, these being vBulletin 3.5.8 and 3.6.5. We recommend that all customers running vBulletin 3.5.x or 3.6.x upgrade to the appropriate version or apply the supplied patch as soon as possible.

It is worth noting that in order to exploit the problem highlighted by the report, the attacking user must satisfy the following conditions:

• Must already have moderator privileges
• Must share the same IP address (or the number of IP octets specified in the Admin Control Panel for IP address matching) with an existing administrator who is currently logged in to the Admin Control Panel
• Must know the Alt-IP and user agent (exact browser identification) of the administrator
• OR must know the license number of the site being attacked

Given these requirements, the privilege escalation exploit claimed by the report is almost impossible to achieve.

Lista de Bugs corrigidos nesta nova versão

Bugs Fixed in vBulletin 3.6.5

The Security Flaw

The reported security flaw described in this announcement, which could potentially allow a SELECT query to be hijacked, has been addressed.

Safari Cookies

A problem where users of the Apple browser Safari would be logged off the system prematurely when vBulletin runs on specific servers has been resolved.
More info...

Internet Explorer 7 Compatability

Much has been said about Microsoft's decision to make the Javascript prompt() function throw a security warning whenever it is called. This change resulted in vBulletin's text editor system throwing security warnings whenever a user tried to insert an image or an email link. The use of prompt() for Internet Explorer 7 users has now been discontinued in favour of an alternative method of collecting user input.
More info...

Additionally, improvements in Internet Explorer 7 mean that certain aspects of the vBulletin pop-up menu system, which were previously required to circumvent rendering issues, can now be bypassed. Most notable amongst these is the code that hides all <select> elements that would intersect with the menu when opened.

Fix for Infractions Bug

A problem where infraction expiration was not cleaned-up properly has been addressed.
More info...

Workaround for a FreeBSD Regular Expression Error on Login

Some users running recent versions of PHP running on FreeBSD have encountered a bug in the regular expression engine that caused an error to be shown when logging in. We have worked around this problem. However, it may still appear in other areas, so we are trying to find a proper fix for the issue.

Arquivos a serem atualizados da versão 3.6.4

• /
  • image.php
  • inlinemod.php
• clientscript/
  • ieprompt.html - new
  • vbulletin_global.js
  • vbulletin_menu.js
  • vbulletin_textedit.js
• includes/
  • class_core.php
  • functions.php
  • functions_infractions.php
  • functions_login.php
  • ieprompt.jpg - new
• install/ - all of it

Templates a serem atualizadas da versão 3.6.4

Não há nenhuma template a atualizar, desde a versão 3.6.3 ou seja vocês podem usar as skins do VB 3.6.3 e 3.6.4 na versão 3.6.5 e elas irão funcionar perfeitamente.

Atualize seu VB para corrigir os problemas de Invasão

Updating your vBulletin to Fix the Potential Exploit

There are two ways in which you can fix the potential exploit in your version of vBulletin:

1. Full Upgrade: The best way to fix the problem is to perform a full upgrade by downloading the complete 3.6.5 package from the vBulletin Members' Area and following the regular upgrade instructions.
2. Patch: A second option is to download the patch files discussed in this thread and upload them to your web server, overwriting the existing files. The patch is available from the Members' Area patch page or you can find it attached to this thread.

Please note that vBulletin 3.6.5 requires at least PHP 4.3.3 and MySQL 4.0.16 or later.

Patch para atualizar seu VB

Patches are now available in the members' area. You may view available patches here. Alternatively, you may use the zip attached to this post to apply the patch. Both methods are equivalent.

Go to the page mentioned above and download the &quot;Security patch for 3.6.4&quot; or download the zip at the end of this post. Extract the zip archive, then connect to your web server using FTP and overwrite the following files using the replacement versions from the zip.

• inlinemod.php

A nova versão está disponível para download na sua área de membros no site vBulletin® - Instant Community

PS: Postei neste área pois estava sem permissão para postar na área de notícias.

[beduino]

Obrigado
Ganondorf
Vou transferir pra la.
Abraços
Beduino

[Tzunderwalker]

Finalmente eles consertaram o bug que dava no IE7, todo mundo do meu fórum já tava reclamando

[rissato]

Opa.... já vou atualizar meu vB...

[beduino]

Hoje à noite fecho o vB Brasil para atualizar.
Abs
B.

ps atualização tql - sem templates ou phrases a atualizar

[jetline]

Ola sou novo e gostaria de poder baixar este forum que e 100 perto do PHPBB que costumo usar, em relaçao a modificação de cores ex. de azul como este para vermelho.,

Obrigado

[Ganondorf]

Postado Originalmente por jetline

Ola sou novo e gostaria de poder baixar este forum que e 100 perto do PHPBB que costumo usar, em relaçao a modificação de cores ex. de azul como este para vermelho.,

Obrigado

Você deve comprar a licença do mesmo no site vBulletin® - Order Form

[-iNSaNe]

A tradução do 3.6.4 funciona no 3.6.5???

[Ganondorf]

Postado Originalmente por -iNSaNe

A tradução do 3.6.4 funciona no 3.6.5???

Funcionar funciona, só que algumas frases da que tem na versão 3.6.5 não funcionam na 3.6.4 então quando vocêfor importar o arquivo .XML ele irá mostrar um problema de incompatibilidade, mas daí é só clicar em Ignore Language Version