• twitter image
  • facebook image
  • youtube image
  • linkedin image
Language: CMS Made Simple Czech CMS Made Simple France CMS Made Simple Hungary CMS Made Simple Russia CMS Made Simple Netherlands

All times are UTC




Post new topic Reply to topic  [ 1 post ] 
Author Message
 Post subject: Announcing CMSMS 2.2.7 - Skookumchuck
PostPosted: Sat Mar 10, 2018 2:03 pm 
Offline
Dev Team Member
Dev Team Member
User avatar

Joined: Tue Oct 19, 2004 6:44 pm
Posts: 7966
Location: Fernie British Columbia, Canada
Today we announce the release of CMS Made Simple v2.2.7 - Skookumchuck. This is a security release and we recommend that everybody upgrade their websites at their earliest convenience.

The primary focus of this release was to fix potential vulnerabilities in the admin login functionality. Including: Fixing an object insertion bug if the login cookie was ever compromised, and fixing an issue where it was potentially possible to forge the cookie by reverse engineering the password salt. Additionally, we have refactored the functionality for resetting forgotten admin passwords and changed the name of the CSRF token that is used on all admin requests.

Secondarily, we modified the FileManager and FilePicker modules to disallow uploading any files that end with a . (dot). This is a minor security enhancement, particularly for windows based hosts.

As normal, the volunteer dev team is only asked to support technical issues with the last two public releases of CMSMS. As of now those are versions 2.2.6 and 2.2.7.

Note: as of version 2.2.7, the minimum PHP version requirement is 5.6. We recommend 7.1 for improved performance.

Thank you, and have fun with CMSMS.

_________________
Follow me on twitter
Please post system information from "Extensions >> System Information" (there is a bbcode option) on all posts asking for assistance.
--------------------
If you can't bother explaining your problem well, you shouldn't expect much in the way of assistance.


Top
  Profile  
 
Share On:
Share on Facebook Share on Twitter Share on Google+
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC


Who is online

Users browsing this forum: No registered users


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Hosting Nation - Managed CMSMS Hosting