new phpbb out, cpanel installer needs updating

[qwerty]

Several critical issues have been discovered with phpbb <= 2.0.17 and the vendor has released 2.0.18 which fixes these issues. However the cpanel installer is currently still 2.0.17

The phpbb holes includes a remote code execution bug which is quite serious.

Bugzilla bug created, please vote to get the installer updated:
http://bugzilla.cpanel.net/show_bug.cgi?id=3450 Thanks

 

[Freezer]

It would be better if cPanel stops supporting phpBB at all... that piece of software is asking for trouble everytime.

 

[NightStorm]

2.0.18 is already on http://www.openinstaller.com, so it will likely be included in the next scripts update.
There is instructions on that site on how you can manually update the package if you are concerned about the possible wait.

 

[vB Martin]

Several critical issues have been discovered with phpbb

There's a surprize...

 

[BianchiDude]

2.0.18 is already on http://www.openinstaller.com, so it will likely be included in the next scripts update.
There is instructions on that site on how you can manually update the package if you are concerned about the possible wait.

When will the next scripts update be?

 

[ntwaddel]

It would be better if cPanel stops supporting phpBB at all... that piece of software is asking for trouble everytime.

yeah really

 

[NightStorm]

In your WHM, uninstall phpBB from the scripts menu
via SSH:
cd /usr/local/cpanel/addons/
wget http://www.openinstaller.com/distfiles/phpBB/phpBB.tar.bz2
tar -jxf phpBB.tar.bz2

Now, when you click on "Bulletin Board" inside cpanel, you will see it is version phpBB 2.0.18_1 (the _1 means they released a patch after the 2.0.18 to fix the installer)

 

[qwerty]

There's a surprize...

What's this supposed to mean ?

 

[qwerty]

In your WHM, uninstall phpBB from the scripts menu
via SSH:
cd /usr/local/cpanel/addons/
wget http://www.openinstaller.com/distfiles/phpBB/phpBB.tar.bz2
tar -jxf phpBB.tar.bz2

Now, when you click on "Bulletin Board" inside cpanel, you will see it is version phpBB 2.0.18_1 (the _1 means they released a patch after the 2.0.18 to fix the installer)

Thanks nightstorm!

By the way, might wanna rm -rf phpBB before the wget step to get rid of the old installer files

 

[vB Martin]

What's this supposed to mean ?

There are core coding problems with phpBB2. Until they fix those the security updates will be endless.

 

[NightStorm]

Mine were removed automatically when I uninstalled the script from WHM... but still something good to double-check in advance.
Note that once cpanel gets up to date, you may want to re-enable phpBB management through the WHM.
Also, take a few minutes to browse the site I linked to up there... they have a copy of phpBB that is referred to as phpBBA... which is phpBB that is supposed to be friendlier for automatic updating on mod'ed forums... essentially, it claims to make the updater actually work.
I have not tried it yet myself, as I am still working on building my own copy of phpBB, but it might be something to consider.

 

[qwerty]

the standard phpbb installer works just fine for updating phpbb .. I've never seen it do anything bad to even customized forums, unless of course the owner edited the default theme, which is just stupid..