Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.
It should be noted that SMF 2.0 RC1-1 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced earlier.
To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual about [url=http://docs.simplemachines.org/index.php?board=2.0;sort=subject]installing and [url=http://docs.simplemachines.org/index.php?board=3.0;sort=subject]upgrading. If you experience a session verification error when inputting FTP details for updating process, please see [url=http://www.simplemachines.org/community/index.php?topic=278824.0]this topic.
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page for all versions.
http://www.simplemachines.org/community/index.php?topic=311899.0