vBulletin 3.6.3

An undocumented behaviour in all Windows versions of Internet Explorer has rendered vBulletin vulnerable to a potential cross-site scripting flaw (XSS). Therefore, we have decided to put out a preventative security release in order to work-around the Internet Explorer problem before it is exploited.

3.6.3 also includes fixes for approximately 50 bugs that were discovered in 3.6.2. For this reason, we recommend all customers upgrade to 3.6.3 as soon as possible. If this is not possible and you are currently running 3.6.2, you may use the patch method discussed here.

Updating your vBulletin to combat the XSS flaw:

Please note that this issue is present in other versions of vBulletin as well. Please see the appropriate announcement!

You have two options to fix the XSS issue:

1. Full Upgrade: The best way to fix the problem is to perform a full upgrade, downloading the complete 3.6.3 package from the vBulletin Members' Area and following the regular upgrade instructions.
2. Patch: A second option is to download the patch files discussed in this thread and upload them to your web server, overwriting the existing files. The patch is available in the Members' Area patch page or later in this post!

--------------------

Reply to the Welcome PM for Full Access to the Forums.. Thanks

Have you heard about Crowdgather?
Find it on Forums

This is going to stink when it comes down to having to re edit templates. If anyone has tons of mods that require editing have fun lol. Luckily I only use one template so that wont be too bad. Brandon what do you think the chance are of mods not working with 3.6.3?

--------------------
GreekRealm

This is the killing item each time with upgrades, template recoding. I once had a lot of them, now just one, already hard enough to keep it fully compatible with all browsers and platforms.

I haven't upgraded to 3.6.2 yet, guess I will wait another week or so before I move. Let other people test out and eventually report bugs and broken addons

--------------------

Aeroclix -- DistantHost link directory
Domains hosting, server rent... -- Distant-Help link directory

I finally updated to 3.6.2 here a week or two ago..

I just uploaded the patch for this update.
when 3.6.4 comes out I'll do a full upgrade

--------------------

Reply to the Welcome PM for Full Access to the Forums.. Thanks

Have you heard about Crowdgather?
Find it on Forums

This upgrade was the easiest so far. One template edit.
Took me all of 30 mins to upgrade 4 boards.

not bad at all.. I think I'll just add the patch to my client sites

--------------------

Reply to the Welcome PM for Full Access to the Forums.. Thanks

Have you heard about Crowdgather?
Find it on Forums

November 9th, 2006

* New vBulletin Versions Released
* Your License Information
* Contact Us

-------------- NEW VBULLETIN VERSIONS RELEASED -----------

An undocumented behaviour in all Windows versions of Internet Explorer
has rendered vBulletin .........blah blah blah blah

Cant beleive it, hows ijits like me supposed to keep up with this ?
Is no wonder I'm still running an antique version, seems like a new flaming release almost every week :S
At least I got THIS e-m, I'm still waiting to be notified that 6.2 came out last month-ish, if it wasn't for Brandons post in here, I wouldn't have had a clue.
I havnt got any "potential cross-site scripting flaw's (XSS)" As If I have noticed lol

Edit : Your post was 11-08-2006, ???????????? Iv'e only got mine today :/

--------------------
I have plenty of talent and vision - I just don't give a damn

ooo what version are you running now ?

--------------------

Reply to the Welcome PM for Full Access to the Forums.. Thanks

Have you heard about Crowdgather?
Find it on Forums