====================================================================

                             CERT-Renater

                 Note d'Information No. 2019/VULN307

_____________________________________________________________________

DATE                : 04/10/2019

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running vBulletin versions 5.5.X prior to
                                     5.5.2, 5.5.3, 5.5.4.

=====================================================================
https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4423646-vbulletin-5-5-x-5-5-2-5-5-3-and-5-5-4-security-patch-level-2
_____________________________________________________________________


vBulletin 5.5.X (5.5.2, 5.5.3, and 5.5.4) Security Patch Level 2
Yesterday, 5:43pm

A security update with respect to custom avatars has been made by
vBulletin in the following security patch.

You can download the patch for your version in the Member's Area

We have made patches available for the following versions of vBulletin
Connect:

    5.5.4 Patch Level 2
    5.5.3 Patch Level 2
    5.5.2 Patch Level 2


Installing the Patch

    Download the appropriate files for your version of vBulletin 5.5.X
    Upload all files found within the zip file. Make sure to overwrite
the existing files on your server.


Older Versions

If you are using a version of vBulletin 5 Connect prior to 5.5.2, it is
imperative that you upgrade as soon as possible. For more information on
upgrading please see Quick Overview: Upgrading vBulletin Connect in the
support forums.


vBulletin Cloud

This security patch has already been applied to all vBulletin Cloud
sites.


=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================