ElkArte Community

Project Support => Announcements => Topic started by: emanuele on March 15, 2018, 06:27:06 pm

Title: ElkArte 1.1.3 - Release announcement
Post by: emanuele on March 15, 2018, 06:27:06 pm
Today, we are pleased to release ElkArte 1.1.3. This release addresses two critical security issues and few bugs identified after the release of ElkArte 1.1.2. As this is a maintenance release, the majority of the updates are focused on bug fixes and increased stability.
This is a critical security update and we strongly encourage anyone running any previous version.

This release follows our semantic version (http://semver.org/) (MAJOR.MINOR.PATCH), meaning that third-point (x.x.X) releases should contain backwards-compatible bug fixes and enhancements, so for the most part you will not find new features in this release. Major new features will be reserved for second point versions (x.X.x).

Refer to the release notes (https://www.elkarte.net/community/index.php?topic=0.0) on the forum for a complete list of updates. (Release notes are not yet ready.)

I have to apologize to @pi.tech  for not mentioning his contribution in reporting the security issue!
Sorry, I was tired and just did a copy and paste of the previous release... where I didn't thank him for his reporting of the other security issue...
Next time I'll try to remember.



Patching procedure:

For any question you may have, feel free to ask on the support forum (http://www.ElkArte.net/community/index.php).

Of course you are encouraged to update to this release since it contains a lot of fixes and improvements, thank you for your continued support!
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: Spuds on March 15, 2018, 08:48:26 pm
Nice  :)

And to double note .... This is a critical security update so don't pass this one up !



Title: Re: ElkArte 1.1.3 - Release announcement
Post by: ahrasis on March 15, 2018, 09:22:28 pm
So far so good. Good jobs @emanuele, @Spuds, and all other developers...

You might want to update this site to 1.1.3 too.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: badmonkey on March 15, 2018, 09:45:31 pm
Done, done, and done.  Thanks guys!   8)
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: emanuele on March 16, 2018, 03:34:02 am
/me any time release an update is always scared something it broken... O:-)
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: tino on March 16, 2018, 12:16:51 pm
Quote This release follows our semantic version (MAJOR.MINOR.PATCH), meaning that third-point (x.x.X) releases should contain backwards-compatible bug fixes and enhancements, so for the most part you will not find new features in this release. Major new features will be reserved for second point versions (x.X.x).

Don’t you mean New Features are in first or second point version if you’re following Semantic Versioning, using the word Major is confusing. As it’s Major.Minor.Patch

Installed with no issues mind.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: emanuele on March 16, 2018, 01:29:15 pm
I think I have not read it in a while. xD
Good point, will try to keep in mind for the next release to reword a bit the sentence, thanks!
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: derived on March 19, 2018, 05:37:34 am
Asking to be sure...
Doesn't update the versioning correctly?

index says 1.1.1
Detailed version check  says 1.1.2 (cept lang files)
Doesn't show 1.1.3 patch in Installed packages

Title: Re: ElkArte 1.1.3 - Release announcement
Post by: hartiberlin on April 24, 2018, 11:23:49 am
Can one go straight from Version 1.1.1 to 1.1.3 ?
or do I need first to install the 1.1.2 Version ?

Many thanks.

Regards, Stefan.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: emanuele on April 24, 2018, 11:47:09 am
From the patches you have to install them all, and I'd suggest to follow that path. :)
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: Dinocanid on May 26, 2018, 11:18:44 am
Has anyone gotten a fresh install of 1.1.3 to work?
For me it's completely unusable because of a white screen error. (group_list does not exist in the database or something...)
Will it only work if I install 1.1.2 and upgrade?
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: radu81 on May 26, 2018, 12:50:24 pm
Which version of mysql do you have on your host? 
Try disabling the strict mode into mysql 
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: Dinocanid on May 26, 2018, 01:23:18 pm
Quote from: radu81 – Which version of mysql do you have on your host?
Try disabling the strict mode into mysql
It's mysql 5. I don't think I have the option to disable strict mode (if it's even on), but I'll check. My server host is AwardSpace if that helps.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: Dinocanid on May 26, 2018, 04:05:49 pm
Okay, so I just checked and strict mode isn't on. This is the full error:

QuoteFatal error: Uncaught Elk_Exception: The database value you're trying to insert does not exist: group_list in /srv/disk5/2736536/www/kincafe.tk/sources/database/Db-abstract.class.php:404 Stack trace: #0 /srv/disk5/2736536/www/kincafe.tk/sources/database/Db-abstract.class.php(102): Database_Abstract->error_backtrace('The database va...', 'The database va...', 256, '/srv/disk5/2736...', 1231) #1 [internal function]: Database_Abstract->replacement__callback(Array) #2 /srv/disk5/2736536/www/kincafe.tk/sources/database/Db-mysql.class.php(168): preg_replace_callback('~{([a-z_]+)(?::...', Array, '\n\t\tSELECT b.id_...') #3 /srv/disk5/2736536/www/kincafe.tk/sources/Security.php(1231): Database_MySQL->query('', '\n\t\tSELECT b.id_...', Array) #4 /srv/disk5/2736536/www/kincafe.tk/sources/subs/Moderation.subs.php(250): boardsAllowedTo(Array) #5 /srv/disk5/2736536/www/kincafe.tk/themes/default/Theme.php(841): loadModeratorMenuCounts() #6 /srv/disk5/2736536/www/kincafe.tk/themes/default/Theme.php(688): Themes\DefaultTheme\Theme->setup in /srv/disk5/2736536/www/kincafe.tk/sources/database/Db-abstract.class.php on line 404

It's also listed here (https://github.com/elkarte/Elkarte/issues/3182) on the github. It seems like a fix hasn't been discovered yet.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: hartiberlin on May 31, 2018, 10:12:48 am
Is the 1.1.4 version with bugfixes and GDPR support coming soon ?
In about how many days ?
I really need to convert now my sites to Elkarte, but wanted to wait, until the GDPR support is out.

Many thanks.

Regards, Stefan.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: ahrasis on May 31, 2018, 10:58:19 am
I think it should be out in a day or two as mentioned by @emanuele and @Spuds last time. Just a guess as I also don't know for sure.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: hartiberlin on June 05, 2018, 06:25:56 am
Now we have the 5th June and still no new version with GDPR support ?

Who is helping to finish the new version ?
How many active developpers does Elkarte have in this moment ?

Many thanks for your hard work.

Regards, Stefan.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: Jorin on June 05, 2018, 07:33:21 am
Do you have a privacy policy conform to the EU-DSGVO? If so, you can re-open your forum no matter what ElkArte version you are using - in my opinion.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: hartiberlin on June 05, 2018, 01:57:36 pm
Are you sure, I thought one must have a cookie management, so that you must be able to enable ro disable all
cookies coming from external sites... ?? Hmmm...

BTW, who are the real developpers here, that decide, when a new version is released ?
Is that Emmanuel and Spruds ? or still a few others ?
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: Jorin on June 05, 2018, 03:17:21 pm
A cookie is not a privacy policy.
Title: Re: ElkArte 1.1.3 - Release announcement
Post by: bea on June 05, 2018, 05:45:42 pm
Quote from: hartiberlin – Are you sure, I thought one must have a cookie management,

depending on which cookies You are setting You might need one ore You might not need one. The session cookies from a vanilla Elkarte installation do - afaik - not even need to be mentioned in the privacy policy. Things might be different regarding third party cookies - but in that respect most commercial and apparently conforming websites are surprisingly lax in this respect.

I recently switched from a SMF site which had been set up intentionally (not by me, beware!) to send a lot of stuff to google in order to achieve a good page ranking to  a straight 1.1.3 installation with additional privacy policy and a few features turned off (e.g. inline youtube...)

I know that's incomplete, and i'm of course also waiting for 1.1.4. But in my eyes it is better to wait a little bit longer for a release of good quality than to install a sack of bugs (Bananensoftware, die beim Kunden reift, brauch ich jetzt wirklich gar nicht. Ganz besonders, weil meine Zeit als IT-consultant vorbei ist)

Title: Re: ElkArte 1.1.3 - Release announcement
Post by: radu81 on June 05, 2018, 06:07:44 pm
Quote from: hartiberlin – BTW, who are the real developpers here, that decide, when a new version is released ?
Is that Emmanuel and Spruds ? or still a few others ?



Yep, mostly they both do the hard and dirty work here  ;D but there are other people which are contributing to this project, you can have a look on GitHub, there is a link on the home page. You will also note that it's an active project if compared to other free forum software.

We know that an update should be released on 1 June, but in the meantime other bugs were found and I guess they choose to solve them with the next update. As you can see it's difficult to give a precise date, but personally I prefer this way, at least we get an indicative date, instead of the answer we used to see for years: "when is ready ". And the last "when is ready" is from 2011-2012 and it's still not ready  :P