phpBB 2.0.13 released - Critical Update -> sigh

[couchmouse]

Hi everyone,

phpBB Group announces the release of phpBB 2.0.13, the "Beware of the furries" edition. This release addresses two recent security exploits, one of them critical. They were reported a few days after .12 was released and no one is more annoyed than us, having to release a new version in such a short period of time.
Fortunately both fixes are easy and in each case just one line needs to be edited.

The first issue is critical (session handling allowing everyone gaining administrator rights) and we urge you to fix it on your forums as soon as possible:

A second minor issue reported to bugtraq several days ago was the path disclosure bug in viewtopic.php which got fixed by applying the following steps:

[middleground]

Damn, just did the .12 on Saturday, time to evaluate other options...getting old..

OK- not that bad...thanks for the headsup

[couchmouse]

yea, this is an easy update. Just don't forget to run the update_to_latest.php in the "install" folder and then delete the "install" folder

[RobbieLePommie]

Just one line... not too bad LOL

[MikeMann]

Originally posted by RobbieLePommie
Just one line... not too bad LOL

Actually it's a line in one file and a small block in another

Updating right now.