Software update: phpBB 2.08a

A new release of the forum has been posted on the homepage of phpBB. It concerns version 2.0.8a and is on this page available in different flavors. phpBB is an open source forum software and uses PHP and MySQL to serve the topics with content. This release fixes a security bug that allowed uninvited people to get hold of password hashes. On the forum of phpBB it says explained how to fix the error itself. The release notes look like this:

This time we have not been notified about this security bug from the “founder” before he posted this to bugtraq.

The bug can allow attackers to obtain password hashes, all existing users of phpBB 2.0.x make the change specified below, it is highly recommended.

We have now updated all archives (for 2.0.8, named 2.0.8a) as made available on the download page here. Therefore all new installations and upgrades will be immune.