2.4.1 to 2.4.2 vs. wait till 2.4.3 ?

zzb · New Member Joined: Jun 05, 2005 Posts: 22 Location: USA

Hi Raven and folks...

A request for a recommendation. I am using 2.4.1 on PHP 7.6 pl3.1 running fine... no issues heavily modded. I just wonder if it is worth updating to 2.4.2 with 2.4.3 around the corner? Since I don't use a wysiwyg editor on 7.6 I wonder if this is worth my time doing?

Also noticed on Bob's Workbard he is almost finishing up a 2.4.3 ver. Does anyone know if it would make more sense to just wait till that's finished? I don't plan to use any PHP engine higher than 7.6 Given that fact, am I just wasting my time continuing to rev up beyond 2.4.1 ?

Thanks for any suggestions from you top dogs here at this awesome site...
ZZ

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

If you have admin authentication working, you should be OK. Then again, it shouldn't be difficult to upgrade to 2.4.2...

Raven · Posted: Mon Dec 26, 2005 8:38 pm

You definitely need to get the 2.4.2pl2 patch installed. Without it, there is a hole that can allow a critical path exposure exploit. The patch can be installed on 2.4.1.

zzb · New Member Joined: Jun 05, 2005 Posts: 22 Location: USA

I see you have a beta version 2.4.2 with just the upgrade files from 2.4.1. Is it safe to use that or should I upgrade from Bob Marion's site? Tnx for the advice.

Raven · Posted: Mon Dec 26, 2005 9:07 pm

I don't have any beta versions. Where are you seeing that? Bob does not have the pl2 fix available.

zzb · New Member Joined: Jun 05, 2005 Posts: 22 Location: USA

Quote:

NukeSentinel_242_71-79 - Upgrade files only v2.4.1-2.4.2 Popular [Recommend Download] Recommend

This is an experimental, if you will, attempt to see if I was able to easily and correctly extract only the files that changed from v2.4.1 to v2.4.2. If this upgrades your site without any problems, then I will probably issue this whenever Bob releases the full upgrade packages.

"This is an experimental... " I downloaded this but I wanted to be sure this is the right set of files with the latest corrections to go from 2.4.1 to 2.4.2 ... Saw the words experimental... (not beta... sri) and it made me question if this is the latest and greatest upgrade.... This download was added to your site in Sept according to the date stamp.

I think what you are suggesting is that AFTER I upgrade from 2.4.1 to 2.4.2 then add the pl2 SQL Injection update (the last file you have in the download section date stamp Dec 16th). Do I have it right now ???

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

Sorry - I missed the seriousness of that upgrade. Thanks for looking out for us, Raven!

Raven · Posted: Mon Dec 26, 2005 11:41 pm

zzb,

- What I meant was the upgrade pack was an experiment - not the files. Sorry for the confusion.

kguske, NP!