MyBB 1.4.6 Released – Security Update

MyBB 1.4.6 is a security update to the MyBB 1.4 series. It fixes 1 medium risk and 1 low risk security vulnerability. We recommend everybody upgrades to this release immediately or patch their boards with the manual patching instructions below.

These vulnerabilities affect MyBB 1.4.5. Older versions of MyBB may also be affected. Please see below for upgrade instructions for 1.2.14.

Thank you to Jacques Copeau for finding and reporting these vulnerabilities.

MyBB 1.4.5 to MyBB 1.4.6 Patch

This patch is only for users running MyBB 1.4.5. If you are running an older version of MyBB then please download MyBB 1.4.6 from the MyBB site and update to it.

Please download the attached ZIP archive and replace the files in your forum directory with those from the ZIP archive.

changed_files_1406.zip

If you wish to manually patch your board please download “mybb_1405_patches.txt” and follow the instructions in that file.

mybb_1405_patches.txt

Reporting MyBB security vulnerabilities

If you think you’ve found a vulnerability in MyBB, we advise you not to publicly post it on these forums or publicly release information about it elsewhere until we’ve had time to prepare and release a patch.

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

This patch is only for users running MyBB 1.2.14 or any previous release of the MyBB 1.2 series.

Please download “mybb_1214_patches.txt” attached to this post and follow the manual patching instructions.

Please note all users of the 1.2.x series are urged to upgrade to the latest release of MyBB. (1.4.6)

mybb_1214_patches.txt

34 thoughts on “MyBB 1.4.6 Released – Security Update”

PLEASE DO NOT POST SUPPORT REQUESTS IN THIS BLOG DISCUSSION THREAD – they will be ignored or deleted.

If you need help please post it at the General Support forum:
http://community.mybboard.net/forum-81.html

This comment thread is for feedback and questions regarding the release, and any clarifications.

Thanks for your cooperation!

Thank you Ryan, the update process is so ease.

Thanks you Ryan, this update is good 😉
I like MyBB, and MyBB in spanish xD

I’ll also just clarify that there is no upgrade script with this update, just changed files that need to overwrite the current versions.

Happily upgraded. 🙂

Thanks… upgrading ^^

Smooth update. Thank you guys

Upgraded 8)

Upgraded nicely 🙂

Upgraded as well. 🙂

Cool. Upgraded with no problems. 😀

Thanks, upgraded and running.

Upgraded successfully 🙂
Thank you

This sucks

I spent 3 hours with 1.4.4 to 1.4.5 upgrading and changing theme

😦

1.4.5 > 1.4.6 is simply uploading a few files, nothing else has to change 🙂

Thanks for the work, thanks!!!

An easy two second job, thanks

Yeah, I remember (few years ago) this security apply to my old SMF forum 🙂
And I remember, last time my forum getting hack..
I am glad to you Ryan, for quick fix.

Thanks.