JELSOFT SECURITY BULLETIN
http://www.vbulletin.com/
18th June 2008

* vBulletin 3.7.1 PL2 and 3.6.10 PL2 Released
* vBulletin 3.7.2 on June 24th
* Your License Information
* Contact Us

------- VBULLETIN 3.7.1 PL2 and 3.6.10 PL2 RELEASED --------------------

An XSS flaw affecting the vBulletin URL redirection system has been identified. It could allow an attacker to trick a moderator or admin into unwittingly performing an action in either the front-end or control panel that they had not intended. To resolve this issue, it is necessary to release PL2 versions of vBulletin 3.7.1 and 3.6.10.

This XSS flaw, and that which made the release of the PL1 versions necessary, was discovered by Jessica Hope and others.

Full details of the release can be found in the vBulletin 3.7.1 PL2 / 3.6.10 PL2 release announcement thread:
vBulletin - Instant Community

------- VBULLETIN 3.7.2 ON JUNE 24TH --------------------

In line with our new scheduled maintenance release policy, we have evaluated the merits of providing a new maintenance release one month after the previous release or waiting until next month. It has been decided that we will bring forward the release of vBulletin 3.7.2 from Tuesday July 29th to this coming Tuesday, June 24th.

Watch your Admin CP News or Latest Version information for an update on June 24th to say that 3.7.2 is available to download, as no eBulletin will be sent for 3.7.2 after this one.

------- YOUR LICENSE INFORMATION ------------------------

You can use this information to log into the members' area to download vBulletin, ImpEx and other vBulletin-related support materials:

Your Customer Number: XXXXXXXXX

If you have misplaced your customer password, you can request that it be re-sent to your registered email address using the following form:
vBulletin - Member Area Recover Lost Password

The members' area is located here:
http://members.vbulletin.com/


-------------------- CONTACT US --------------------------

Please do not respond to this email directly. We will not receive your response. Please use the links below.

Got a vBulletin technical query? Contact support:
http://www.vbulletin.com/go/techsupport

For all other queries, please visit this page:
vBulletin - Contact Us

----------------------------------------------------------