WHMCS Security Advisory for 4.x, 5.0, 5.1

[sohouk]

Maybe its a typo or I am missing something but in the Members / Downloads I am looking at the following download to apply after the security advisory. I have chosen this as it seems nearest to my version which is 5.0.3.

 

However, I am confused by the description - which I have underscored for ease. It says:

WHMCS V5.0.5 [security Update] -

23rd April 2013 - This is an important security update for WHMCS V5.1.x and earlier. This version can be applied to a V5.0.4 installation only.

 

Does this means its only OK for version 5.0.4 or does it mean and version from 5.01. to 5.0.4 ?

 

In light of all the activity and bugs and confusion over the recent upgrades I am cautious about any changes that will kill my install.

 

Can someone confirm the WHMCS V5.0.5 is OK for V5.0.1?

 

Thanks,

 

Trevor

[bear]

I'd also like that clarified. I'm running 5.0.3, which has the patch from March which didn't increment it to 5.0.4, so I'd like some reassurance it's the right one.

[PDS]

@bear I had same install as you (5.0.3 patched to 5.0.4) and have applied the 5.0.5 patch. The patch has fixed the integration code issue and so far I haven't had any problems.

 

Except:

http://forum.whmcs.com/showthread.php?72138-Namecheap-Registrar-Error

 

but I do not know if upgrade caused the issue as I only noticed today.

[Matt]

I can confirm that the V5.0.5 patch can be applied to either a V5.0.3 or V5.0.4 installation. It includes both the security fix of the 12th March and yesterdays, as well as the new CRSF Token Management functionality to allow token validation to be turned off for the domain checker.

 

If you get any problems with it, just let us know.

 

Matt

[hiddenko]

Matt, why in V5.0.5 patch language file (admin/lang/english.php) is encoded ??

[sohouk]

I can confirm that the V5.0.5 patch can be applied to either a V5.0.3 or V5.0.4 installation.

 

If I read this right , then it does not apply to version 5.0.1 so I again left wondering what version I should be looking at ?

 

I see so many people asking the same question that it seems to me that a simple table of all recent versions and the upgrade paths for each should be considered and posted as a sticky.

 

Trevor