CMS Made Simple 1.3.1 - Security Release

calguy1000 · Post by **calguy1000** » Tue Jun 24, 2008 11:49 pm

After too long of a delay, due to vacations and time constraints, we’ve released CMS 1.3.1

This is a security release and we recommend everybody upgrade their sites to CMS 1.3.1 as soon as possible.

This release completely removes the postlet file upload stuff from the file manager. It is the postlet stuff that has been causing the problems in the latest releases, and we finally decided just to nuke it. Then, after waiting for a developer to get back from holiday, we had to discuss it, test it, merge it, test it again….

Yes, this release has taken too long to come out, and we apologize for that… we don’t normally do this, and we didn’t intend for this to happen.

This release should resolve all known security releases. It can be downloaded from http://www.cmsmadesimple.org/downloads

vilkis · Post by **vilkis** » Wed Jun 25, 2008 12:13 am

Maybe this post is not for this topic but thanks for the reminder of new CMSMS version in backend (admin area).

cb2004 · Post by **cb2004** » Wed Jun 25, 2008 8:10 am

As the database version has not changed for a while the upgrade.php does not need to be run unless there are database changes. Is that correct?

alby · Post by **alby** » Wed Jun 25, 2008 8:14 am

cb2004 wrote: As the database version has not changed for a while the upgrade.php does not need to be run unless there are database changes. Is that correct?

DB not changed, overwrite with diff file and go

Alby

pozmu · Post by **pozmu** » Wed Jun 25, 2008 11:15 am

Is this upgrade required also for 1.2.x branch? I mean in terms of security?

cyberman · Post by **cyberman** » Wed Jun 25, 2008 12:31 pm

WhiteStar99 · Post by **WhiteStar99** » Wed Jun 25, 2008 10:13 pm

Hi!
I wonder what postlet Filemanager you mean? (heard something with Java and FTP like)
I know of the Filemanager unter Content -> FileManager and the one "inside" TinyMCE. But I do not see any difference nor do I miss something (running a more or less standard installation).

Thanks for the security update!

cyberman · Post by **cyberman** » Thu Jun 26, 2008 4:51 am

WhiteStar99 wrote: I know of the Filemanager unter Content -> FileManager and the one "inside" TinyMCE.

You could choose it in FileManagers tab Settings, Upload method, Entry "Postlet, Java based, allows multiple file-selection" ...

EGS · Post by **EGS** » Mon Jun 30, 2008 3:33 pm

Upgrading from 1.2.5 to 1.3 to 1.3.1 was a breeze.
I recommend that everyone does so if they're still using the 1.2.x series.

CMS Made Simple Forums

CMS Made Simple 1.3.1 - Security Release

CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release

Re: CMS Made Simple 1.3.1 - Security Release