v1.6.3 Security Patch Released

SychO

ernestdefoe thanks for the great feedback!

ernestdefoe

SychO not a problem. I know that’s one of the things y’all were looking at before taking out of beta was testing on shared hosting. It took a lot of figuring out how to install it since it was labeled as beta but once I got it installed I haven’t had any issues with it.

LianSheng

Thanks to the researchers who found them and fixed them on the fly 👍️

Wellwisher

Updated without an issue. Thank to everyone who was involved in identifying vulnerabilities and fixing them. 🥳
Thanks also to the clear, user-friendly instructions on this post.

I could have had a family of spiders on my face... Thanks for saving us.✌️

m4v3rick

MikeJones maybe want to add that to the instructions above. I was in panic for a minute or two 🤣

Same here.

Update was smoothly done. Thanks!

Xkyer

Thanks alot.

jewel

Thank you Team! update is done!

jixn-hu

谢谢

CyberGene

Maybe this discussion should be locked already. No need for it to get stickied for everybody every time when someone posts “ok”.

luceos

CyberGene we never lock the discussion of our last release.

mcakmak

hello; Updated version 1.6.0 on Github? Is it safe?
https://github.com/flarum/flarum

clarkwinkelmann

mcakmak to verify you are up to date, use the instructions from the first post:

SychO Verify that you're on v1.6.3
composer show flarum/core

flarum/flarum and flarum/core are 2 different parts of Flarum. flarum/core is the one that received the security update. flarum/flarum is only the "skeleton" with mostly static files and doesn't change very often.

mcakmak

clarkwinkelmann
I could not explain briefly, because I will install on shared host, are the files stored on github included in the latest 1.6.3 security patch?

rdn

Flarum is much faster to release an update, bug fixes, and new features than XenForo (a paid forum software).
Brilliant ❣️

clarkwinkelmann

mcakmak if you installed Flarum using the official instructions at https://docs.flarum.org/install after January 10, then yes you should have the security patch included. You can also see your Flarum core version in the admin dashboard next to the PHP and MySQL versions.

It's not possible to install Flarum using only files downloaded from GitHub though, you need to run Composer at some point, either on the host or on a temporary server before copying the files https://docs.flarum.org/composer

mcakmak

clarkwinkelmann thank you for your help i am using shared hosting and no ssh access i want to update system

BarryBooder

hi here append a problem：

Deprecated: preg_match(): Passing null to parameter #2 ($subject) of type string is deprecated in /www/wwwroot/www.syucpct.cn/vendor/flarum/core/src/Locale/Translator.php on line 65

Fatal error: Uncaught Laminas\HttpHandlerRunner\Exception\EmitterException: Output has been emitted previously; cannot emit response in /www/wwwroot/www.syucpct.cn/vendor/laminas/laminas-httphandlerrunner/src/Exception/EmitterException.php:20 Stack trace: #0 /www/wwwroot/www.syucpct.cn/vendor/laminas/laminas-httphandlerrunner/src/Emitter/SapiEmitterTrait.php(42): Laminas\HttpHandlerRunner\Exception\EmitterException::forOutputSent() #1 /www/wwwroot/www.syucpct.cn/vendor/laminas/laminas-httphandlerrunner/src/Emitter/SapiEmitter.php(21): Laminas\HttpHandlerRunner\Emitter\SapiEmitter->assertNoPreviousOutput() #2 /www/wwwroot/www.syucpct.cn/vendor/laminas/laminas-httphandlerrunner/src/RequestHandlerRunner.php(75): Laminas\HttpHandlerRunner\Emitter\SapiEmitter->emit() #3 /www/wwwroot/www.syucpct.cn/vendor/flarum/core/src/Http/Server.php(45): Laminas\HttpHandlerRunner\RequestHandlerRunner->run() #4 /www/wwwroot/www.syucpct.cn/public/index.php(26): Flarum\Http\Server->listen() #5 {main} thrown in /www/wwwroot/www.syucpct.cn/vendor/laminas/laminas-httphandlerrunner/src/Exception/EmitterException.php on line 20

I updated from version 1.1 to 1.7.1, and encountered this error.
thanks

luceos

BarryBooder you should disable deprecation warnings: https://discuss.flarum.org/d/31968-staff-diary-v17-cycle/5

BarryBooder

luceos Hello, I have configured the php as you said, but he still reports this error
my php.ini setting:

my php version:

the error:

And when I run the php flarum cache:clear command, I get the following output:

thanks

« Previous Page