XF 2.2 2.2.17 upgrade / patch for us cloudies

[FTL]

In the post below it says:

Cloud customers have received this patch automatically and does not require an upgrade.

However, when I look in the ACP, it still shows 2.2.16 and it also shows 2.2.16 in the Account section, so I'm wondering if there's an issue here. I'd therefore be grateful if you could please clarify.

Thread 'XenForo 2.2.17 Released (Security Fix)'

Dec 20, 2024

Today, we are releasing XenForo 2.2.17 to address a potential security vulnerability. We recommend that all customers running XenForo 2.2 upgrade to 2.2.17 or use the patch instructions below as soon as possible.

Notes:

a. XenForo 2.3.1 and above is not affected by this issue. If you are still running XenForo 2.3.0 you should upgrade to the latest release or apply the patch below.
b. The few XenForo Cloud customers still running XenForo 2.2 have been patched automatically.

The issue relates to a potential redirection exploit using a specially crafted URL.

XenForo extends...

• XenForo
• Replies: 0
• Forum: Announcements

• 
• 

@Chris D

 

[Chris D]

The issue has been patched. Meaning there isn’t an actual upgrade process. We have handled it all automatically.

 

[FTL]

Ok, so showing 2.2.16 is just a cosmetic issue then? That's ok, no problem.

 

[Chris D]

2.2.16 is the latest version for Cloud. It’s not really a cosmetic issue. Just that the fixes have been incorporated into that version.