Software update: phpBB 3.3.1

Version 3.3.1 of phpBB has been released. With this program it is possible to set up a web forum. PhpBB is made available under the gpl license and uses PHP and a database program to store messages. Besides MySQL, PostgreSQL, Oracle Database, Microsoft SQL Server and SQLite are also supported as database software. Version 3.3.1 has fixed some security vulnerabilities and for the same reason version 3.2.10 released. The release notes for version 3.3.1 can be found below.

phpBB 3.3.1 Release – Please Update

We are pleased to announce the release of phpBB 3.3.1 “Bertie’s Twenty”. This version is a maintenance and security release of the 3.3.x branch which fixes one security issue, introduces further hardening, and resolves various issues reported in previous versions.

Previous versions of phpBB did allow limiting the dimensions of images posted. This could however also be used to eg check for the existence of services that should only be accessible from the internal network. We would like to thank FVD for reporting this issue to us via hackerone. The issue has been assigned CVE-2020-8226.

The fixed issues include, among others, issues with using Emojis in multiple text fields, the inability to delete or mark PMs read in the UCP folder view, issues with resetting a password, and a slow search on PostgreSQL. The amount of emails sent for notifications related to topics have been improved and new and improved enable and disable mechanisms for newer profile field types have been integrated. We would like to dedicate this last addition to javiexin.

The full list of changes is available in the changelog file within the docs folder contained in the release package. You can find the key highlights of this release on the wiki and a list of all issues fixed on our tracker.