Skip to content

XOOPS 2.5.11.1

Choose a tag to compare

View all tags
@mambax7 mambax7 released this 09 Oct 03:27
· 2 commits to master2.5.11 since this release
v2.5.11.1
1ccde5f

XOOPS 2.5.11.1 is a security update for XOOPS 2.5.11. All 2.5.11 sites should apply it.

What's fixed

The bundled input filter (Xmf\FilterInput, also used by XoopsFilterInput) now includes the fixes from XMF 1.2.32.1:

  • GHSA-8j4x-8r8r-5jgw: some input made filtering run until PHP hit its memory limit. Filtering now always finishes.
  • GHSA-pf53-59r5-mhjv: some tag and attribute patterns got through the filter. Tag and attribute checks are now stricter.

There are no database, template or language changes. PHP 5.6 and later are still supported.

How to update

  • On XOOPS 2.5.11: download xoops-2.5.11-to-2.5.11.1-patch.zip. Back up your site, then copy the zip's htdocs folder over your XOOPS root, keeping the folder paths. It replaces two files. You don't need to run the upgrade wizard. Afterwards, System Admin shows XOOPS 2.5.11.1-Stable.
  • New install, or a version older than 2.5.11: use the full package (the source code zip on this release) and follow the usual install or upgrade steps.
Assets 3
Loading