Software update: phpBB 3.2.4

Nov

17

2018

Version 3.2.4 of phpBB has been released. With this program it is possible to set up a web forum. PhpBB is made available under the gpl license and uses php and a database program to store messages. In addition to MySQL, PostgreSQL, Oracle Database, Microsoft SQL Server and SQLite are also supported as database software. Version 3.2 includes support for php 7, recaptcha 2.0 and Symfony 2.8. Furthermore, the updating process has been improved, more information is shown in quoted text and more emojis can be used. The release notes for this issue can be found below.

phpBB 3.2.4 Release – Please Update
We are pleased to announce the release of phpBB 3.2.4 “Bertie’s” stache “. This version is a maintenance and security release of the 3.2.x branch which fixes one security issue and various issues reported in previous versions.

The security issue was discovered with a new exploitation technique called Phar deserialization. An attacker with control over a founder admin could use the default unserialization or metadata in Phar files. More information about this technique can be found here . In order to fix this issue we have removed the absolute paths in the Admin Control Panel. This is the image of the ImageMagick path, so make sure you have the GD image library available instead. A new event to generate thumbnails was added as replacement, so that you can create thumbnails. We would like to thank Simon Scannell and Robin Peraglie or RIPS Technologies for their report and responsible disclosure. The issue has been assigned CVE-2018-19274.

The fixed issues include, among others, compatibility issues with PHP 7.2 and issues with removing users from the newly registered user group more than once.
Among the notable changes are the addition of the list-unsubscribe header to emails sent by phpBB and the ability to reset your password without entering the username.

The full list of changes is available in the changelog file within the docs folder contained in the release package. You can find the key highlights of this release on the track of all issues fixed on our tracker .
phpBB 3.1 screenshot (620 pix)
Version number 3.2.4
Release status Final
Operating systems Script language
Website
phpBB
Download
https://www.phpbb.com/downloads/
License type GPL

Viewing:-112

In: A Technology & Gadgets Asked By: [23633 Red Star Level]

Answer this Question

You must be Logged In to post an Answer.

Not a member yet? Sign Up Now »