MyBB Community Forums

It sure seems that way-I was wandering around the MyBB SVN, and stumbled upon 1.6.5 chillin out in the '1.6-stable' branch.

Coming soon? I think so!

Check it out:
http://svn.mybboard.net/mybb/branches/1.6-stable

If you don't want to checkout the svn yourself, i have zipped it and uploaded it to my server. (if you don't trust me, feel free to do the checkout yourself lol)

http://mybbmods.net/mirror/mybb1.6.5.zip

Please don't attempt to upgrade your forum until an official release is announced. It's coming in the very near future.

We don't support unreleased versions either.

For a full list of changes, see [wiki]1.6.5[/wiki] in the Wiki.

The plugin update is only the small problem with this update.

I noticed that a few weeks ago. Although I did set my guess for the release date as November 5th, I suspect it will be a week or two before it's released.

I believe one of my vulnerability reports is still being processed (Haven't had a reply yet) which might also be added to 1.6.5. If it's already been packaged for release then most likely it will be added to 1.6.6.

Either way, 1.6.5 contains some fantastic updates. IIRC there are some more optimizations to showthread and forumdisplay too.

I'm only aware of the language vulnerability?

You can see which issues are fixed in the Roadmap tab on Redmine and selecting 1.6.5. We've been ready with the release for a while but we upgraded the community forums this morning to give it a quick test to see if there were any last minute glitches.

(2011-11-05, 11:43 AM)Tomm M Wrote: [ -> ]I'm only aware of the language vulnerability?

I reported it via the contact form. I assume Tim has received it. It's nothing too serious, but I didn't make it public because it could prove fatal in some cases.

FYI the community forums are now running 1.6.5, assuming no major issues are discovered the release should be within the next week or so.

Is it running the same revision as is on the SVN?

(2011-11-05, 11:50 AM)Malcolm. Wrote: [ -> ]

(2011-11-05, 11:43 AM)Tomm M Wrote: [ -> ]I'm only aware of the language vulnerability?

I reported it via the contact form. I assume Tim has received it. It's nothing too serious, but I didn't make it public because it could prove fatal in some cases.

The only one I am aware of is:
http://dev.mybb.com/issues/1729

It's basically just this issue, we added protection for the database logins in 1.6.4 but other lower risk things like $_ENV can still be accessed. I sent it to Tom any way.