Release Logs:XOOPS Cube Legacy 2.1.8a

From xoopscube

Contents 1 Summary 2 How to upgrade from 2.1.8 3 How to upgrade from older version 3.1 Do you have problem? 4 Fixes 4.1 Security 4.2 3rd Party Libraries 5 Staff

Summary

• This is an emergency patch for SQL injections.
• The current phase is stable.
• XOOPS Cube Legacy 2.1.8 Download
• Patch from 2.1.8 is available. Download

How to upgrade from 2.1.8

1. You have to backup your XCL site and should prepare your test environment to test upgrading.
2. Turn off your site: You can change the preference of your site and turn off your site.
3. Download the patch package and unzip it.
4. Upload all files under the html directory to your server.
5. Test your site.
6. Turn on your site.

How to upgrade from older version

1. You have to backup your XCL site and should prepare your test environment to test upgrading.
2. Turn off your site: You can change the preference of your site and turn off your site.
3. Download the package and unzip it.
4. Remove html/mainfile.php and html/install directory.
   1. If you're using extra languages, remove install directory form your extra language directory under extra_languages.
5. Upload all files under the html directory to your server.
6. Go to the control panel and update all modules indicating the red icon.
7. Test your site.
8. Turn on your site.

Do you have problem?

If you have some troubles, report your troubles to user community sites. Add your environments to your report:

• Server OS
• Web Server Product and Version.
• PHP Version.
• MySQL Version.

Fixes

Security

• Fix Bug #3078705 - include/notification_update.php SQL Injection Vulnerability

3rd Party Libraries

• Fix Bug #2686348 - smarty: several bugs fixed in version 2.6.22 since 2.6.19
• Fix Bug #2666664 - /class/snoopy.php is susceptible to a remote command.

Staff

• Kilica
• Marijuana
• Mikhail
• Xoopserver