vb3.7.3

[Mike]

The forums software has been upgraded to vb3.7.3. Let me know if you find any issues.

Mike

[jellybelly]

vBulletin 3.7.3 PL1

A report was published recently pointing to potential flaws within the random number generator in PHP applications who use a weak seed and then go on to disclose any of the random numbers generated. This flaw could allow random numbers within vBulletin to be predicted and under the correct circumstances allow an attacker to obtain access to a user's account. To resolve this issue, it is necessary to release patch level versions of vBulletin 3.7.3 and 3.6.11.

This original flaw was discovered by Stefan Esser and its application within vBulletin by another individual.

[Mike]

Thats about the way it has been working lately. Upgrade the software one day, and they come out with a security fix a week after the release. At least its just a PL. All you have to do is overwrite the files if you are running the same version as the PL.