new phpbb out, cpanel installer needs updating

qwerty

Well-Known Member
Jan 21, 2003
215
2
168
Several critical issues have been discovered with phpbb <= 2.0.17 and the vendor has released 2.0.18 which fixes these issues. However the cpanel installer is currently still 2.0.17

The phpbb holes includes a remote code execution bug which is quite serious.

Bugzilla bug created, please vote to get the installer updated:
http://bugzilla.cpanel.net/show_bug.cgi?id=3450 Thanks
 

BianchiDude

Well-Known Member
PartnerNOC
Jul 2, 2005
617
0
166
NightStorm said:
2.0.18 is already on http://www.openinstaller.com, so it will likely be included in the next scripts update.
There is instructions on that site on how you can manually update the package if you are concerned about the possible wait.
When will the next scripts update be?
 

qwerty

Well-Known Member
Jan 21, 2003
215
2
168
NightStorm said:
In your WHM, uninstall phpBB from the scripts menu
via SSH:
cd /usr/local/cpanel/addons/
wget http://www.openinstaller.com/distfiles/phpBB/phpBB.tar.bz2
tar -jxf phpBB.tar.bz2

Now, when you click on "Bulletin Board" inside cpanel, you will see it is version phpBB 2.0.18_1 (the _1 means they released a patch after the 2.0.18 to fix the installer)
Thanks nightstorm!

By the way, might wanna rm -rf phpBB before the wget step to get rid of the old installer files
 

NightStorm

Well-Known Member
Jul 28, 2003
285
4
168
cPanel Access Level
Root Administrator
Twitter
Mine were removed automatically when I uninstalled the script from WHM... but still something good to double-check in advance.
Note that once cpanel gets up to date, you may want to re-enable phpBB management through the WHM.
Also, take a few minutes to browse the site I linked to up there... they have a copy of phpBB that is referred to as phpBBA... which is phpBB that is supposed to be friendlier for automatic updating on mod'ed forums... essentially, it claims to make the updater actually work.
I have not tried it yet myself, as I am still working on building my own copy of phpBB, but it might be something to consider.
 

qwerty

Well-Known Member
Jan 21, 2003
215
2
168
the standard phpbb installer works just fine for updating phpbb .. I've never seen it do anything bad to even customized forums, unless of course the owner edited the default theme, which is just stupid..