Quote from the official SMF community:
Simple Machines announces the release of SMF 1.1.8, which addresses a few vulnerabilities found in 1.1.7. We would like to encourage all users to upgrade as soon as possible.
Together with the release of SMF 1.1.8, Simple Machines has released the latest development branch version: SMF 2.0 Release Candidate 1. If you are currently running 1.1.7 you can choose to upgrade to 1.1.8 or 2.0 RC1, both of which contain the security updates. Users still running SMF 1.0.x series can upgrade to SMF 1.0.16.
To upgrade, use the package manager to upgrade to 1.1.8. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Then follow the simple instructions through the package installation!
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual about installing and upgrading. If you experience a session verification error when inputting FTP details for updating process, please see this topic.
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found here.
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!
Regards,
Simple Machines
Download link:
http://download.simplemachines.org/
