XenForo 2.3.13 and Add-ons Released (Includes Security Fixes)

XenForo 2.3.13 Released​

XenForo 2.3.13 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability.

One-click upgrade to XenForo 2.3.13​

Directly from your admin control panel

If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.

XenForo 2.3.13 includes the security fixes discussed in this thread:

XenForo

Thread 'Security fixes released for all XenForo and Media Gallery versions (2.2.0 to 2.3.12)'

Today, we have released security maintenance updates for all supported XenForo releases from XenForo 2.2.0 through XenForo 2.3.12, together with applicable XenForo Media Gallery updates. These fixes are all thanks to the efforts of Marco Paciaroni (BomboBombone) who kindly submitted 14 findings to us via VulnCheck.

These releases resolve 14 security vulnerabilities affecting several areas of XenForo. Depending on the XenForo version, enabled features, configuration, and privileges available to an attacker, the issues may permit unauthorised actions, disclosure of...
  • Like
  • Love

Some of the other changes in XF 2.3.13 include:

The following public templates have had changes:
  • bb_code_tag_url_unfurl
  • featured_content_item
  • lightbox_macros
  • trending_content_item_thread
Where necessary, the merge system within the "outdated templates" page should be used to integrate these changes.

As always, new releases of XenForo are free to download for all customers with active licenses. You may now upgrade from your admin control panel or grab the new version from the customer area.

Current requirements​

Please note that XenForo 2.3 has higher system requirements than earlier versions.

The following are minimum requirements:
  • PHP 7.2 or newer (PHP 8.3 recommended)
  • MySQL 5.7 and newer (Also compatible with MariaDB/Percona etc.)
  • All of the official add-ons require XenForo 2.3.
  • Enhanced Search requires at least Elasticsearch 7.2.

Installation and upgrade instructions​

Full details of how to install and upgrade XenForo can be found in the XenForo 2 Manual. We strongly recommend upgrading directly from within your control panel.
 
Click to expand...

XenForo Media Gallery 2.3.13 Released​

XenForo Media Gallery 2.3.13 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo Media Gallery 2.3 upgrade to this release to benefit from increased stability.

One-click upgrade to XenForo Media Gallery 2.3.13​

Directly from your admin control panel

If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.

XenForo Media Gallery 2.3.13 includes some of the security fixes discussed in this thread:


XenForo

Thread 'Security fixes released for all XenForo and Media Gallery versions (2.2.0 to 2.3.12)'

Today, we have released security maintenance updates for all supported XenForo releases from XenForo 2.2.0 through XenForo 2.3.12, together with applicable XenForo Media Gallery updates. These fixes are all thanks to the efforts of Marco Paciaroni (BomboBombone) who kindly submitted 14 findings to us via VulnCheck.

These releases resolve 14 security vulnerabilities affecting several areas of XenForo. Depending on the XenForo version, enabled features, configuration, and privileges available to an attacker, the issues may permit unauthorised actions, disclosure of...
  • Like
  • Love

The following public templates have had changes:
  • trending_content_item_xfmg_media
Where necessary, the merge system within the "outdated templates" page should be used to integrate these changes.

XenForo Media Gallery requires XenForo 2.3 or later.

Purchasing​

XenForo Media Gallery can be purchased with a new license via the purchase page or with an existing license via the customer area.

Installation, upgrading and configuration​


Please see our XenForo Media Gallery manual page for more information.
 

XenForo Resource Manager 2.3.13 Released​

XenForo Resource Manager 2.3.13 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo Resource Manager 2.3 upgrade to this release to benefit from increased stability.

One-click upgrade to XenForo Resource Manager 2.3.13​

Directly from your admin control panel

If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.

The following public templates have had changes:
  • featured_content_item_resource
  • trending_content_item_resource
  • xfrm_resource_rate
  • xfrm_resource_reviews
  • xfrm_resource_updates
Where necessary, the merge system within the "outdated templates" page should be used to integrate these changes.

XenForo Resource Manager requires XenForo 2.3 or later.

Purchasing​

XenForo Resource Manager can be purchased with a new license via the purchase page or with an existing license via the customer area.

Installation, upgrading and configuration​


Please see our XenForo Resource Manager manual page for more information.
 

XenForo Enhanced Search 2.3.13 Released​

XenForo Enhanced Search 2.3.13 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo Enhanced Search 2.3 upgrade to this release to benefit from increased stability.

One-click upgrade to XenForo Enhanced Search 2.3.13​

Directly from your admin control panel

If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.

XenForo Enhanced Search requires XenForo 2.3 or later.

Purchasing​

XenForo Enhanced Search can be purchased with a new license via the purchase page or with an existing license via the customer area.

Installation, upgrading and configuration​


Please see our XenForo Enhanced Search manual page for more information.
 

XenForo 2.3.13 for XenForo Cloud​

Because XenForo Cloud customer's installations were already patched to contain the same security fixes as 2.3.12 and 2.3.13, we ultimately decided to not push out an actual 2.3.13 release for XenForo Cloud in favour of a normal bug fix release in the near future.

Your installations will continue to report the current version as 2.3.11.
 
You must log in or register to reply here.
Back
Top Bottom