Discuss all about IP.Board 2.3.4 Security Enhancements (02-20-08)

Discuss IP.Board 2.3.4 Security Enhancements (02-20-08) at Bulletin Board News, All the latest information from vBulletin, Invision Power Board and phpBB, all put together in some forum for your joy and pleasure. Up to the minute news about the from The Staff Lounge, Your vBulletin Resource. We'.





Post New Thread  Reply
 
LinkBack Thread Tools Thread Tools Feed Icon
  #1  
Old 02-21-2008, 07:30 PM
IPB News
TSL Fixated
 
Post Count Posts: 87

Up to the minute news about the from The Staff Lounge, Your vBulletin Resource. We'll find the latest news so you can chat about here.
Quote:
IP.Board 2.3.4 Security Enhancements

We are releasing a minor security update to address issues recently reported regarding areas of IP.Board 2.3.4. These security issues are rather low priority and the impact is minimal due to other security features in the software.

Issue

Due to Internet Explorer's overly zealous and often ambitious parsing engine, specifically crafted BBCodes can contain javascript. This issue is mitigated due to the use of httpOnly cookies which makes this more of a nuisance than a genuine threat.

Patching Your IP.Board

The IP.Board 2.3.4 download in the client area has already been updated with the required changes. If you download IP.Board after the date of this announcement your installation will be up to date.

Changed Files
Download the zip file below which includes only the changed files for this update. Simply upload and overwrite the old files.

http://forums.invisionpower.com/index.php?act=attach&type=post&id=16288


Wed, 20 Feb 2008 10:44:48 -0500
Post your comments about this story, and other news here.

Reply With Quote