Today I got this message in my inbox:
I wanted to share it with you all

Hi everyone,

phpBB Group announces the release of phpBB 2.0.12. This release
addresses a couple of potential exploits and fixes a number of issues
involving path disclosures, etc. It also introduces a new ACP based
version check (language package maintainers please note the
additional localisation required for this). For further information
please see our announcements forum at phpBB.com:

http://www.phpbb.com/phpBB/viewtopic.php?t=265423

As with all new releases we urge you to upgrade as soon as possible.
You can of course find this download available on our website at:

http://www.phpbb.com/downloads.php

As per usual three packages are available to simplify your upgrade.
Upgrade information using the mod template should be available
shortly (for those who prefer this method).

--Powered by PHPlist, www.phplist.com --

 

 

 

Reply

I think everyone knows that. I figured it out not to long ago.

Reply

I didn't until I read this, and for somereason, when I go to choose which server to download it from, it won't let me... says the file cant be found!

Reply

It's difficult to install MODS and to maintain PHPBB. Before, I really like PHPBB. Now when I found out SimpleMachines (http://www.simplemachines.org) it's really easy to install a MOD (GUI). I'm sure that you are going to love it. Check out their site. Check out the number of online users... It's really famous.

Reply

The servers are outta sync. I think the only one working is sydney Australia.

Reply

Wooow , I think Last Version of BB is 2.0.11 but
thanks for report in this topic
anyway I Hate BB Its Not SECURE

Reply

Errrr is phpBB in a rush?
Today I got another mail...
phpBB 2.0.13 released:

Hi everyone,
phpBB Group announces the release of phpBB 2.0.13. This release addresses two
recent security exploits, one of them critical. They were reported a few days
after .12 was released and no one is more annoyed than us, having to release a
new version in such a short period of time.
Fortunately both fixes are easy and in each case just one line needs to be
edited.
The first issue is critical and we urge you to fix it on your forums as soon as
possible:
Open includes/sessions.php
Find:
if( $sessiondata['autologinid'] == $auto_login_key )
Replace with:
if( $sessiondata['autologinid'] === $auto_login_key )
The second minor issue, reported to bugtraq several days ago, was the path
disclosure bug in viewtopic.php. For further information on how to manually fix
this bug please see our announcements forum at www.phpbb.com:
http://www.phpbb.com/phpBB/viewtopic.php?t=267563
As with all new releases we urge you to upgrade as soon as possible.
You can of course find this download available on our website at:
http://www.phpbb.com/downloads.php
Note: The Downloadmirror in Belgium works... The rest the need to resync.
As per usual three packages are available to simplify your upgrade.

Peace

 

 

 

Reply

well maybe they are really active these days and always looking for defects in the phpbb system and releasing various critical updates. well it seems that the phpbb gourp still has a lot to do in terms of securing it's system. even though it is true...it is still my favorite!

Reply

Yea same here... But your right about the security thing

Reply