Update Feed

Vanilla Forums 2.1.8p2

16 January 2015

Vanilla Forums version 2.1.8p2 is now available (security release).

Upgrading to Vanilla Forums 2.1.8p2

Vanilla Forums 2.1.8p2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Vanilla Forums updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Vanilla Forums install to test the 2.1.8p2 upgrade prior to applying it live. Get started managing your Vanilla Forums installations with Installatron

What's New in Vanilla Forums 2.1.8p2

Critical Security Patches

Fixes a SQL injection vulnerability.
Fixes a user registration vulnerability.
Hat tip to ZeniMax Online Studios' security team for disclosing the SQL injection vector.

Changes

Hardens the UserModel against potential abuse.
Stub content being re-created on utility/update on private communities.
Increase permissions required for massing banning (from Moderation.Manage to Settings.Manage).
Collect additional information about mass-banning changes.
Removes super-admin permissions from secondary accounts on utility update.
Fixes an issue changing primary keys during utility update