from 7.1.4 to 7.1.5

Can someone tell me what is changed?
Why theupgrade is good for

Or tell me where i can see it?

 

thank you... 

http://www.busimatch.club ( The most exclusive business club)
Quote · 19 Jan 2015

what the headings says...
security update!

Quote · 19 Jan 2015

All it contains are the changes needed to patch the security issue (edit: what solusoft said!). No language file changes, no changes to core modules besides a version bump. Only affected files are ones rarely (if ever) touched by mods.

 

Still, I strongly recommend creating a backup before applying any patches. But this one should be the easiest in a long time.

 

Edit: As for what security issue, that's unknown. BoonEx might release that information after a few weeks or never. You can see the changeset dump from AlexT to have some kind of an idea (edit: not all modified files are listed): http://www.boonex.com/trac/dolphin/changeset/18052

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 19 Jan 2015

I need to get busy then, I am still at 7.1.2 LOL.

Geeks, making the world a better place
Quote · 19 Jan 2015

 slacker ;-)

I need to get busy then, I am still at 7.1.2 LOL.

 

Quote · 19 Jan 2015

Many people will miss this update, Cause I don't see it happening due to the lack of push notification like Trident. And that feature is not going to happen in our so called Dpro. Problem is, i want all the feature of Trident in Dpro cause they are more upto date to current needs of the users but over there the problem is lack of modules and over here (Dpro) is lack of upto date features. So stuck in the middle :/

Umar Haroon
Quote · 19 Jan 2015

 

I need to get busy then, I am still at 7.1.2 LOL.

 lol

Quote · 19 Jan 2015

checked on trac and all I can see is 2 lines being tabbed in once in BxDolFilesModule.php  (Lines 281 and 282) and then version number and date changes.... I think they are hideing the true security fix O_O 

~~Mike ~~ This Signature is missing something :(
Quote · 19 Jan 2015

 

 slacker ;-)

I need to get busy then, I am still at 7.1.2 LOL.

 

Not really, too much other things to have the free time and my core files are heavily changed from standard Dolphin; so it makes it much harder.  I have to be very sure that the upgrades don't break my site.

Geeks, making the world a better place
Quote · 20 Jan 2015

 

checked on trac and all I can see is 2 lines being tabbed in once in BxDolFilesModule.php  (Lines 281 and 282) and then version number and date changes.... I think they are hideing the true security fix O_O 

Not necessarily, files upload can be a big security hole in any site.

Geeks, making the world a better place
Quote · 20 Jan 2015

We aren't disclosing the details for the security reasons, after some time we can provide the details upon the request. 

I think they are hideing the true security fix O_O 

 

Rules → http://www.boonex.com/terms
Quote · 20 Jan 2015

 Does this security issue affect Dolphin 7.0.9 too?

We aren't disclosing the details for the security reasons, after some time we can provide the details upon the request. 

I think they are hideing the true security fix O_O 

 

 

Quote · 20 Jan 2015

Only this security fix affects Dolphin 7.0:

http://www.boonex.com/forums/topic/Medium-Risk-Security-Vulnerability-in-Dolphin-7-1.htm#242667

Which is incorporated into 7.1.5.

Other fixes in 7.1.5 shouldn't affect 7.0.9, but 7.0.9 may have other security problems, so update to the latest 7.1 version is highly recommended.

Does this security issue affect Dolphin 7.0.9 too?

 

Rules → http://www.boonex.com/terms
Quote · 26 Jan 2015

 Thanks Alex!

Only this security fix affects Dolphin 7.0:

http://www.boonex.com/forums/topic/Medium-Risk-Security-Vulnerability-in-Dolphin-7-1.htm#242667

Which is incorporated into 7.1.5.

Other fixes in 7.1.5 shouldn't affect 7.0.9, but 7.0.9 may have other security problems, so update to the latest 7.1 version is highly recommended.

Does this security issue affect Dolphin 7.0.9 too?

 

 

Quote · 26 Jan 2015
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.