Xenforo 2.x.x XenForo 2.1.9 Full / Upgrade (Security Fix)

[OTuGaMoDz]

la communauté

Today, we are releasing XenForo 2.1.9 and XenForo 2.0.13 to address a potential security vulnerability that may affect any customer who makes use of our PayPal payment handler.

As well as user upgrades, this may affect add-ons you have installed which process payments using our PayPal payment handler.

We recommend that all affected customers running XenForo 2.1 or XenForo 2.0 upgrade to 2.1.9 or 2.0.13 or use one of the attached patch files as soon as possible.

Specifically, the issue relates to a specially crafted callback (or IPN) which is then processed successfully using PayPal's sandbox validation endpoint instead of their live system. If successful, a purchase could be completed without your PayPal account actually receiving any funds.

There are no other fixes included in this version. There will be a further 2.1 maintenance release in the coming weeks.

Applying a Fix: Upgrading
You may upgrade to 2.1.9 or 2.0.13 to fix this issue. You should upgrade as you would to any other release.

Customers with an active license may download 2.1.9 or 2.0.13 from their customer area. Full details for how to install and upgrade XenForo can be found in the XenForo Manual.

If you are running XF 2.1 you can upgrade directly from within your control panel.

Applying a Fix: Patching
Alternatively, this issue can be fixed by applying the patch in the attached file. You should simply overwrite the following file with the version attached to this message:​

• src/XF/Payment/PayPal.php​

The file can be found at the same path within the attachment.

Please ensure you download the correct patch for your XenForo version. If you are running XenForo 2.1 then please only download xf-patch-219.zip. If you are running XenForo 2.0 then please only download xf-patch-2013.zip.

Lien de téléchargement version full :

Vous devez répondre avant de pouvoir voir le contenu des données cachées.

Lien de téléchargement version upgrade:

Vous devez répondre avant de pouvoir voir le contenu des données cachées.

Lien de téléchargement xf-patch-219 et xf-patch-2013:

Pour voir ce contenu caché, vous devez aimer ce contenu.

 

Xenforo 2.x.x  [ADD-ON] XenForo Nulled 2.x AUTO UPGRADER 2.3

Xenforo 2.x.x  XenForo 2.0.13 Full / Upgrade (Security Fix)

[Rammstein]

merci à toi

 

[OTuGaMoDz]

merci à toi

De rien

 

[Tony]

merci

 

[Brad]

Merci pour cette énième MAJ ...

 

[laurent68]

Merci ! patch ajouter en pièce jointe

 

[lebigb]

merci

 

[Smallville]

Merci beaucoup

 

[XenosDesigner]

Merci à vous

 

[lagrace]

merci

 

[Kaareth]

Merci pour ce partage

 

[Gr3g62]

Merci pour ce partage

 

[azyro59]

merci trop

 

[dibbasamad]

I may need to download this

 

[macjee]

merci pour le partage

 

[fionei]

merci à toi