vBSEO Security Bulletin - vBSEO 3.3.2 Released

I am running latest version of vb 3.8.4 pl 2.

I copied the 4 /includes/ files from vb_patch384 to my server a few days ago already.

If you are on a VPS or dedicated server, you need to run a malware scan. If you're on shared hosting, have your host do it.

They're not attacking a vBSEO file, they're attacking a vBulletin file.

If there is remaining malware or a backdoor somewhere, they can continue to get into a patched system.

As these exploits may have dumped your entire server, you need to update every password for every system, ftp, email, ssh, etc etc, and make sure your system is clean... both in the forum directory and the rest of your server too.

We have not had any valid reports of a re-hack post patch that was not related to a previous-to-patch exploit/backdoor still being in place.

This happened to me today - I updated vbseo just to make sure and removed a suspicious file from the customavatar directory. Hopefully that will do the trick. I noted that the file in the customavatar directory was created last week, but I didn't get the iframe injected into my header until today.

After been hit by the same exploit, I recommend to check all templates for any occurence of <iframe. I had to make this directly in the database to be sure I got everything.

Can someone please direct me to upgrade instructions? First time I have to upgrade mysel...going from 3.3.0 to 3.3.2 and just want to know if its any more difficult then vb upgrades.

Thanks

Hello


Upgrade instructions ( readme.html ) are located inside docs folder within the package you download

Originally Posted by moddis

Can someone please direct me to upgrade instructions? First time I have to upgrade mysel...going from 3.3.0 to 3.3.2 and just want to know if its any more difficult then vb upgrades.

Thanks

1. The instructions are included in the download.

2. The upgrade is easy. It's just like installing a vBulletin add-on, rather than the vBulletin software itself. Just upload the files and import the product from your Admin CP.

One alert: If you upgrade vBSEO, you also need to upgrade to the latest beta for the vBSEO site map generator - the old one won't work.

Originally Posted by djbaxter

1. The instructions are included in the download.

2. The upgrade is easy. It's just like installing a vBulletin add-on, rather than the vBulletin software itself. Just upload the files and import the product from your Admin CP.

Ok, although im pretty sure the setting would stay the same since they are saved in database, I just want to be positive that after upgrade I would not need to play with the VB setting again..would I?

Originally Posted by djbaxter

One alert: If you upgrade vBSEO, you also need to upgrade to the latest beta for the vBSEO site map generator - the old one won't work.

I am only upgrading to version 3.3.2 not the new 3.5 beta version. Are you saying even is i upgrade to vbSEO3.3.2 for vbulletin 3.8.4, i would still need to upgrade the sitemap generator from 2.5 to the 2.6 beta?

Thanks!

Originally Posted by moddis

Ok, although im pretty sure the setting would stay the same since they are saved in database, I just want to be positive that after upgrade I would not need to play with the VB setting again..would I?

No. All your settings should be retained.

Originally Posted by moddis

I am only upgrading to version 3.3.2 not the new 3.5 beta version. Are you saying even is i upgrade to vbSEO3.3.2 for vbulletin 3.8.4, i would still need to upgrade the sitemap generator from 2.5 to the 2.6 beta?

No. I thought you meant the 3.5 RC version.

Ok Great, im reaty to upgrade now

stay on sitemap 2.5 for vb 3.x series. 2.6 is for vb4.

Brian Cummiskey / Crawlability Inc.
Sneak Preview Video of the new Control Panel

vBSEO 3.5 RC1 PL1- Released for your Evaluation

You need to upgrade your signature, Brian. We're up to 3.5 RC2 now.

RC is still in 'pre-release' status. It is offered for download and recommended, but it was never a full release. We'll likely be jumping to RC3 shortly anyway

Oh one more upgrading question not discused in the standard instructions...
Is is recommended to turn of forum while performing such an upgrade or it really does not not make a bit difference?

Thanks!