MyBB 1.8.38

SecurityMaintenance

code 1838

Full Package

Install a new MyBB forum or upgrade from older versions.

.zip – 2.21 MB

Download from MyBB.com Download from GitHub.com (mirror)

sha512:

ad142d8433569354c5dd369cf4888700a92e700ee2bf7076ecda2c4f8c9e23775304815dec115fa10b14684723c3952674c980db49383fecced79a8b5ea5cb3f

More checksums…

sha256:

302e9584fb8e6212104e7c57a8c00ba8e10c4cfcc2604b6de08be483d6029729

sha1:

0f71f3e3ef88b900e6a3f10c0ada578ca532a9a5

md5:

a8dfb0ecc8f0ab4341f0648a2018c3f1

Changed Files

Upgrade from the previous version.

.zip – 0.6 MB

Download from MyBB.com Download from GitHub.com (mirror)

sha512:

a0ce6ac13ce99fd7b482330c847bea1aeee448d8f2f21d5a19239df1f23a642ff68e515c457adf6379f5e7dc063ea44e27ce363afef2ddaaa6bb8fa17d0c6e4a

More checksums…

sha256:

1ada6ade5fc14c1d9e476ed18b7b7ba8ef4356f86ffbb3760c803807d8346472

sha1:

20989c5fc4b2bc4eb4c8082594cb5f1e44d1c7f0

md5:

a84d3abe4954a433c2631f427aaaf593

How to verify packages

Administrators of installed boards should update the existing configuration (inc/config.php) to include all addresses blocked by default in Disallowed Remote Addresses.

Upgrading to this Version

To upgrade: copy and overwrite the files, and run the install/ upgrade script.

Before performing any upgrade, remember to backup your forum’s files and database and store them safely.

If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete.

Follow the Upgrade Documentation for more detailed instructions.

Security Vulnerabilities Addressed (2)

Low risk

Incomplete disallowed remote addresses list SSRF [1]

CWE-184 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2024-23336 Reported by shin24

Low risk

Backups directory .htaccess deletion [1]

CWE-20 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L CVE-2024-23335 Reported by shin24

Issues Resolved (16)

View issues on GitHub

Changed Files ()

Changed Language Files (4)

There are changes to 4 language file(s). Changed languages files can be cross-referenced from the list above.

Changed Templates (8)

  • forumdisplay_inlinemoderation
  • forumdisplay_threadlist
  • search_results_posts_inlinemoderation
  • search_results_threads_inlinemoderation
  • showthread
  • showthread_inlinemoderation
  • showthread_moderationoptions
  • showthread_moderationoptions_threadnotes