[Discuss] phpBB 3.1.1 Release - Please Update

[Anonymous_et_EE]

I see there is no language change at moment? Following github link above.

[watisnf.nl]

Thanks for the update, good that you took action right away! Good idea that the team plays safe Already update two forums this morning, all went well.

[LavIgor]

I see there is no language change at moment? Following github link above.

There is one small change in phpBB/language/en/install.php.
https://github.com/phpbb/phpbb/compare/ ... ee5e35L550

By the way, was a security XSS issue mentioned in the announcement fixed?

[Marshalrusty]

By the way, was a security XSS issue mentioned in the announcement fixed?

Yes, of course. It is fixed in 3.1.1.

[FoFa]

Thanks for reactivity :wink :

[hewmac06]

Great to see such quick reaction from the team, much appreciated.

[jaiak]

when an automatic update like wordpress ?

link in the control panel does not work , I had to click directly on the URL /database_update.php

thanks

[PICnico]

There is still the bug of wrong site numbers, when using global announcments.

[naderman]

There is still the bug of wrong site numbers, when using global announcments.

Yes, it will be fixed in 3.1.2.

[Joe User]

Can we please get a CVE-ID for the security issue, thanks.

[Cable Player]

Thank you so much for this update.

So many people were complaining that we would not get another update for a year.

Good to see that even though it's a small update that updates happen all the time with 3.1 makes it even better than 3.0

I just don't understand the thinking behind this...

In the history of 3.0.x there has been only one occasion where an update took longer than a year to be released. (3.0.11 to 3.0.12) - it's safe to assume that work was well underway on 3.1 during this period (anybody, please correct me if I'm wrong).

3.0.12 Sept 2013
3.0.11 Aug 2012
3.0.10 Jan 2012
3.0.9 Jul 2011
3.0.8 Nov 2010
3.0.7-PL1 Mar 2010
3.0.7 Feb 2010
3.0.6 Nov 2009
3.0.5 May 2009
3.0.4 Dec 2008
3.0.3 Nov 2008
3.0.2 Jul 2008
3.0.1 Apr 2008
3.0.0 Dec 2007

It doesn't matter how frequently a software is updated, what matters is what is updated.
For example, 3.1.1 was released a few days after the 3.1 release, which with your thinking is great as we have a new update. Now, no offense to the team as "it" happens, but this was an emergency update to provide a vulnerability fix (as well the contact page change which could also be seen as a vulnerability as guests could impersonate staff from the board).
I'd much rather wait a year for an update because that means no vulnerabilities have been found and there aren't any major bugs which need fixing asap.
Every 3.1 update will be considered "small". The next "large" update will be 3.2.

So, yes, in this case a quick update was overall a GOOD thing, but 3.1 is so early on right now (it is 5 days old according to the gold release) it can't be compared to 3.0.x as being "better" as it is considerably different both on the user end and admin end. 3.0.x is 7 YEARS old.

That's just my two cents.

[..777..]

Smooth update was smooth. Thank you phpBB crew.

[Phillip]

Smooth update was smooth. Thank you phpBB crew.

Usually with any update with phpBB is smooth. So I have to agree on this.

[noth]

on the automatic update .....

is the vendor folder a NEW vendor folder to replace the 3.1.0 vendor folder

or does it just have a few files to ADD to it?

[nicofuma]

Always completely erase this folder, doesn't matter.