v1.6.3 Security Patch Released

itsPat

Thanks to everyone involved for fixing all those vulnerabilities that quickly! Will bump the version of all our communities now and get back to you when everything worked out.
I also really appreciate the effort going into the write-ups and that you constantly try to do improve 🚀

SychO

We also just released subscriptions v1.6.3 that complements these patches
Please update again if you haven't.

@itsPat @hrvoje_hr @tpokorra @peopleinside @Vadim_RUNN @andreagdipaolo @Subarist

Vadim_RUNN

SychO updated a couple of hours ago, w/o any issues. Thanks for your care!

MikeJones

should there be a mirgrate command its askign me for a db password now...

Update:

I had to run php flarum migrate or else it was redirecting to like the standard flarum set up asking for a db password...

clarkwinkelmann

MikeJones the database password prompt appears anytime the flarum/core version changes, even if there are no database changes. I think it's done this way for performance.

If you run php flarum migrate on the command line it will do the same and the prompt on the web will not appear 👍️

MikeJones

clarkwinkelmann maybe want to add that to the instructions above. I was in panic for a minute or two 🤣

m4v3rick

MikeJones maybe want to add that to the instructions above. I was in panic for a minute or two 🤣

Same here.

Update was smoothly done. Thanks!

itsPat

All updates went through without issues and all communities are running smoothly 👍️

Subarist

The 1.6.3 update encountered a small problem with my sql, but I think it should be related to my database.

The update is complete after deleting this table. everything is fine.
Thank you gentlemen

ernestdefoe

Just wanted to put this out there. I'm on shared hosting using the package manager and was able to update to v1.6.3 with no issues. So thank you for that wonderful extension it makes my life so much easier because I don't always have access to my computer and trying to do command line on my phone is not the easiest thing in the world.

SychO

ernestdefoe thanks for the great feedback!

ernestdefoe

SychO not a problem. I know that’s one of the things y’all were looking at before taking out of beta was testing on shared hosting. It took a lot of figuring out how to install it since it was labeled as beta but once I got it installed I haven’t had any issues with it.

LianSheng

Thanks to the researchers who found them and fixed them on the fly 👍️

Wellwisher

Updated without an issue. Thank to everyone who was involved in identifying vulnerabilities and fixing them. 🥳
Thanks also to the clear, user-friendly instructions on this post.

I could have had a family of spiders on my face... Thanks for saving us.✌️

Xkyer

Thanks alot.

jewel

Thank you Team! update is done!

jixn-hu

谢谢

CyberGene

Maybe this discussion should be locked already. No need for it to get stickied for everybody every time when someone posts “ok”.

luceos

CyberGene we never lock the discussion of our last release.