ElkArte Community

Project Support => Announcements => Topic started by: emanuele on April 22, 2017, 04:38:53 pm

Title: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 22, 2017, 04:38:53 pm
Today, we are pleased to release ElkArte 1.0.10. This is a security release and fixes some security issues that were found and reported in ElkArte. It also contains few other fixes for bugs identified since the release of 1.0.9. As this is a maintenance release, the majority of the updates are focused on bug fixes and increased stability. This is a critical security update and we strongly encourage anyone running any previous version.

This release follows our semantic version (http://semver.org/) (MAJOR.MINOR.PATCH), meaning that third-point (x.x.X) releases should contain backwards-compatible bug fixes and enhancements, so for the most part you will not find new features in this release. Major new features will be reserved for second point versions (x.X.x).

Refer to the release notes (http://www.elkarte.net/community/index.php?topic=4419.0) on the forum for a complete list of updates.



Patching procedure:

For any question you may have, feel free to ask on the support forum (http://www.ElkArte.net/community/index.php).

Of course you are encouraged to update to this release since it contains a lot of fixes and improvements, thank you for your continued support!
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 22, 2017, 05:59:16 pm
And I would like to thank the people that have tested the release: Ahrasis, Jorin, phantom and radu81.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: b4pjoe on April 22, 2017, 11:00:57 pm
I get an error: The package you are trying to download or install is either corrupt or not compatible with this version of the software.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: kucing on April 22, 2017, 11:07:57 pm
i got
QuoteError in package installation
At least one error was encountered during a test installation of this package.
It is strongly recommended that you do not continue with installation unless you know what you are doing, and have made a backup very recently.

This error may be caused by a conflict between the package you're trying to install and another package you have already installed, an error in the package, a package which requires another package that you have not installed yet, or a package designed for another version of the software.

My theme: Lazyday

My addons:
Code: [Select]
Attachment Image Resize	1.0.2
Disposable Email Check 1.0.0
ElkArte 1.0.10 patch 1.0.0
ElkArte 1.0.6 patch 1.0.0
ElkArte 1.0.7 patch 1.0.0
ElkArte 1.0.8 patch 1.0.0
ElkArte 1.0.9 patch 1.0.0
Global Header and Footer 2.0.1
reCaptcha 1.0.0
Remove Last Edit By 1.0.0
Smush.it! 0.2
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 23, 2017, 01:59:22 am
Quote from: b4pjoe – I get an error: The package you are trying to download or install is either corrupt or not compatible with this version of the software.

Same here.

On my support forum I have version 1. 0.8.1 instead of 1.0.9. Please make sure I can install the update there too.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Frenzie on April 23, 2017, 02:31:07 am
I get the same non-theme errors as @kucing.[1] I'm on 1.0.9.

Quote from: for SSI.php
Code: [Select]
// Shortcut for the browser cache stale
define('CACHE_STALE', '?109');

Code: [Select]
// Shortcut for the browser cache stale
define('CACHE_STALE', '?1010');

Mine says:
Code: [Select]
// Shortcut for the browser cache stale
define('CACHE_STALE', '?1081');

Quote from: for index.php
Code: [Select]
 * copyright:	2011 Simple Machines (http://www.simplemachines.org)
 * license: BSD, See included LICENSE.TXT for terms and conditions.
 *
 * @version 1.0.9
 *
 */

$forum_version = 'ElkArte 1.0.9';
define('FORUM_VERSION', $forum_version);

// First things first, but not necessarily in that order.
define('ELK', 1);

// Shortcut for the browser cache stale
define('CACHE_STALE', '?109');

if (function_exists('set_magic_quotes_runtime'))
@set_magic_quotes_runtime(0);

Code: [Select]
 * copyright:	2011 Simple Machines (http://www.simplemachines.org)
 * license: BSD, See included LICENSE.TXT for terms and conditions.
 *
 * @version 1.0.10
 *
 */

$forum_version = 'ElkArte 1.0.10';
define('FORUM_VERSION', $forum_version);

// First things first, but not necessarily in that order.
define('ELK', 1);

// Shortcut for the browser cache stale
define('CACHE_STALE', '?1010');

if (function_exists('set_magic_quotes_runtime'))
@set_magic_quotes_runtime(0);

Same issue. Once again, mine says:
Code: [Select]
// Shortcut for the browser cache stale
define('CACHE_STALE', '?1081');
It are the same files, so I assume the actual errors are the same.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 23, 2017, 04:12:55 am
That was the testing version of 1.0.9, if you can, edit your index.php and ssi.php and just install the new one.
Sorry about it...
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Frenzie on April 23, 2017, 04:37:47 am
Testing version of 1.0.9? Huh, I don't recall that. In that case the fact that one of my themes says @verson 1.03 while the updater expects 1.06 isn't something specific to my install either? (Other than apparently being the testing version of 1.09).
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: kucing on April 23, 2017, 08:24:40 am
Quote from: emanuele – That was the testing version of 1.0.9, if you can, edit your index.php and ssi.php and just install the new one.
Sorry about it...

i believe that's for 1.0.8.1? I'm using 1.0.9, if there anything I can do to update safely to 1.0.10?
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: b4pjoe on April 23, 2017, 08:39:49 am
Mine shows 1.0.8 but I remember there was an issue with 1.0.8 when it was released which if I remember correctly was why 1.0.9 was released shortly afterwards. I could never install 1.0.9 either. Is there any way to get up to 1.10?
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: b4pjoe on April 23, 2017, 08:50:17 am
Here is what I have installed presently and if I try to upload the 1.0.9 patch I get the error message shown below. You can also see by the listing that 1.0.10 does not have an 'Install' link.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Spuds on April 23, 2017, 10:00:26 am
I think this is what is going on.  

1) The official 1.0.9 PATCH file that was released, has a couple of version errors in it.  First it uses the ElkArte_1081_patch as the package ID where it should have been ElkArte_109_patch, this gives you the package already exists error.  So if you had installed the 1.0.8.1 test/update version, then you would not be able to download/install the final 1.0.9 patch.

2) Next the official 1.0.9 PATCH still used "1081" instead of "109" in both SSI.php and in index.php  BUT the new 1.0.10 PATCH is looking for that to be 1.0.9 so it creates a couple of update errors.  You would not see those if you started using ElkArte with 1.0.9 as a the FULL package correctly uses 109 in those two areas.  So those errors only effect those that have been using ElkArte since before 1.0.9 :'(

What to do?
1) If you show 1.0.8.1 as installed, I would uninstall that, delete that package file, and then install the official 1.0.9 patch.  1.0.9 has what 1.0.8.1 had and a bit more. 

2) If you do have 1.0.9 installed AND are getting the two update errors, one in SSI.php and one in index.php, that means you should edit those two files and look for
Code: [Select]
define('CACHE_STALE', '?1081');
and change that to
Code: [Select]
define('CACHE_STALE', '?109');
you will find that one in each of those files.  Once done, try the 1.0.10 patch again.

Alternative approach to try ...  If you have 1.0.8.1 or 1.0.9 installed, and don't want to edit files then Uninstall that version (either 1.0.9 or 1.0.8.1 whichever you have).  Download the 1.0.9 version attached to this post, install it, then install 1.0.10.  That should install with no errors. 

Do note that install errors in themes other than the default are not uncommon and can generally be ignored, its up to the theme authors to determine of those changes are appropriate for those themes.

@emanuele should we update the 1.0.10 update to look for 1.0.8.1 as well as 1.0.9 in those two places, given that the 1.0.9 patch file on the release site uses 1.0.8.1.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Frenzie on April 23, 2017, 10:34:39 am
Based on my packages my upgrade path was quite simply 1.0.7 > 1.0.8 > 1.0.9, which I'd assume to quite common.

QuoteDo note that install errors in themes other than the default are not uncommon and can generally be ignored, its up to the theme authors to determine of those changes are appropriate for those themes.
Of course, but it's never complained about a version mismatch in the theme header before (was 1.0.3, expected 1.0.6). Just a funny coincidence I guess. :)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Spuds on April 23, 2017, 10:39:55 am
I missed that it gave an error on a default theme file, do you recall which file?  The official upgrade path that you properly followed  should have only cough resulted in two errors due to the cache_stale value. 
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: kucing on April 23, 2017, 01:13:31 pm
i did the alternative one (installed the patch2). but the theme error can be ignored? i use lazyday
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Spuds on April 23, 2017, 01:31:09 pm
Yes ... thats a custom theme that will need to be updated by the author (yeah me) with any of the needed changes. 

Assuming you have not done any custom work to that theme, then you will just be able to get the latest (when I'm done) and overwrite the old files.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: b4pjoe on April 23, 2017, 02:07:59 pm
When I try to uninstall 1.0.8.1 I get this error:
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Frenzie on April 23, 2017, 02:44:19 pm
Quote from: Spuds – I missed that it gave an error on a default theme file, do you recall which file?  The official upgrade path that you properly followed  should have only cough resulted in two errors due to the cache_stale value. 
Nono, it was a custom theme (your own Silence (https://github.com/Spuds/Elk_Theme_Silence)). It's just that the specific part it had trouble with was pretty much the most generic part possible. But I think I first started using Elkarte 1.0.6 which I suppose means any 1.0.3 strings would've never been updated to that. :)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 23, 2017, 03:18:26 pm
/me feels fixing 5 different issues in one topic is gonna be a huge mess. :P

Anyway.
@b4pjoe could you please do the following:
via ftp, go to the "packages" folder in your forum,
find a file named ElkArte_v1-0-8-1_patch.zip (or something close to it, it must contain "v1-0-8-1" in the name),
download it on your computer,
attach it here.

P.S.
Sorry for making it a bit more difficult, but that way it will be easier for both you and me fix all the issues in just one go. :)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: b4pjoe on April 23, 2017, 03:27:39 pm
Here ya go....
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 23, 2017, 03:52:37 pm
Install the package provided by Spuds here http://www.elkarte.net/community/index.php?topic=4420.msg31992#msg31992
And then install 1.0.10. :)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Frenzie on April 23, 2017, 04:31:12 pm
@emanuele Sorry, I'll be quiet. I already manually edited my files before I responded here. :)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 23, 2017, 04:55:59 pm
@Frenzie no problem, as long as the problem is fixed. :D
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: b4pjoe on April 23, 2017, 07:08:35 pm
Quote from: emanuele – Install the package provided by Spuds here http://www.elkarte.net/community/index.php?topic=4420.msg31992#msg31992
And then install 1.0.10. :)

Thanks. 1.0.10 is now installed.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: kucing on April 23, 2017, 11:52:26 pm
Quote from: Spuds – Yes ... thats a custom theme that will need to be updated by the author (yeah me) with any of the needed changes. 

Assuming you have not done any custom work to that theme, then you will just be able to get the latest (when I'm done) and overwrite the old files.
thanks. I will wait then.

no custom work done.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 24, 2017, 12:46:35 am
Quote from: emanuele – Install the package provided by Spuds here http://www.elkarte.net/community/index.php?topic=4420.msg31992#msg31992
And then install 1.0.10. :)

I get a lot of errors when trying this. See attachment "1.0.81" please.

Since I have no addons installed I can copy the new 1.0.10 install package on the server, can't I?


Another problem with another board (1.0.9): With my 1.0.9 board I get two errors too (see attachments named "109" please).
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Frenzie on April 24, 2017, 03:51:14 am
@Jorin Doesn't that mean you should be good to go with the patch from https://github.com/ElkArte/ElkArte/releases/tag/v1.0.10 ?
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 24, 2017, 03:53:55 am
I tried. Sorry, two problems in one post. I edited the post above and tried to make it clear.

One board is 1.0.8.1 and gets a lot of errors during installation. I tried the special update package provided by @Spuds.

The second board is 1.0.9 and gets less errors during installation. I tried the standard update package 1.0.9 -> 1.0.10.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: live627 on April 24, 2017, 02:45:58 pm
Download a package by url
https://github.com/elkarte/Elkarte/releases/download/v1.0.10/ElkArte_v1-0-10_patch.zip

it works; local disk untouched :D
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: live627 on April 24, 2017, 04:08:05 pm
need to update the newsfader
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 24, 2017, 04:18:46 pm
Darn!
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Spuds on April 24, 2017, 08:00:17 pm
And the home page download link
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 25, 2017, 03:23:34 am
Quote from: Jorin – Another problem with another board (1.0.9): With my 1.0.9 board I get two errors too (see attachments named "109" please).

Will anyone look at this please? Seems like a small problem, only version number changes...
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 25, 2017, 04:59:04 am
Those two errors @Jorin can be ignored and you can install.
/me have to remember to use a regexp for stales so that Elk will not moan about not so important stuff.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 25, 2017, 05:00:24 am
Okay, thank you.  :)  But version number in the footer and admin central is still shown as 1.0.9.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 25, 2017, 07:33:57 am
Just edit index.php and change to 1.0.10. :P
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 25, 2017, 07:37:40 am
Spoiler (click to show/hide)
  ;)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 25, 2017, 08:02:19 am
Updated my production site. Worked. Well done!  :)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: inter on April 26, 2017, 08:12:41 am
http://www.elkarte.net/ change url for download button
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 26, 2017, 02:00:55 pm
One day I'll remember to do everything... the day the release will be completely scripted. xD

Fixed, thanks!
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: live627 on April 26, 2017, 07:42:04 pm
That script should include updating the newsfader "what changed since..."
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 27, 2017, 02:06:34 am
/me has not yet written it (that's why it's not there... :-[)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 27, 2017, 02:20:49 am
Why not change the link in the Home page to this: https://github.com/elkarte/Elkarte/releases/

It shows the latest version on the top and you never have to think about the Home page again.  :D
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 27, 2017, 06:02:08 am
Because there, the one at the top is the release candidate and not the "stable". ;)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: live627 on April 27, 2017, 06:11:21 am
Quote from: emanuele – /me has not yet written it (that's why it's not there... :-[)
in the newsfader? still says 1.0.8.
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: Jorin on April 27, 2017, 06:51:21 am
Quote from: emanuele – Because there, the one at the top is the release candidate and not the "stable". ;)

But you have a little image showing that. I think a forum admin should know what's the difference. Just my 2 cents.  ;)
Title: Re: ElkArte 1.0.10 - Release announcement
Post by: emanuele on April 27, 2017, 07:08:00 am
Ouch!