10 November 2015
FluxBB version 1.5.9 is now available (security release).Upgrading to FluxBB 1.5.9
FluxBB 1.5.9 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply FluxBB updates as new versions are released, or use Installatron's Clone feature to duplicate an existing FluxBB install to test the 1.5.9 upgrade prior to applying it live. Get started managing your FluxBB installations with InstallatronWhat's New in FluxBB 1.5.9
This release fixes two security issues: The first one allowed attackers to trick moderators into e.g. locking or stickying other topics without noticing. The second change prevents sophisticated timing attacks targeted at e.g. password hashes.
Other changes in this release include several fixes of regressions introduced in the last release, fixes related to the handling of several esoteric HTTP headers, and a fix for a quote bug that broke the forum layout. Finally, if you want to embed your forum in another web page, the relevant HTTP header is now configurable.