Page 1 of 1

CMS Made Simple 1.3.1 - Security Release

Posted: Tue Jun 24, 2008 11:49 pm
by calguy1000
After too long of a delay, due to vacations and time constraints, we’ve released CMS 1.3.1

This is a security release and we recommend everybody upgrade their sites to CMS 1.3.1 as soon as possible.

This release completely removes the postlet file upload stuff from the file manager. It is the postlet stuff that has been causing the problems in the latest releases, and we finally decided just to nuke it. Then, after waiting for a developer to get back from holiday, we had to discuss it, test it, merge it, test it again….

Yes, this release has taken too long to come out, and we apologize for that… we don’t normally do this, and we didn’t intend for this to happen.

This release should resolve all known security releases. It can be downloaded from http://www.cmsmadesimple.org/downloads

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Wed Jun 25, 2008 12:13 am
by vilkis
Maybe this post is not for this topic but thanks for the reminder of new CMSMS version in backend (admin area).

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Wed Jun 25, 2008 8:10 am
by cb2004
As the database version has not changed for a while the upgrade.php does not need to be run unless there are database changes. Is that correct?

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Wed Jun 25, 2008 8:14 am
by alby
cb2004 wrote: As the database version has not changed for a while the upgrade.php does not need to be run unless there are database changes. Is that correct?
DB not changed, overwrite with diff file and go

Alby

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Wed Jun 25, 2008 11:15 am
by pozmu
Is this upgrade required also for 1.2.x branch? I mean in terms of security?

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Wed Jun 25, 2008 12:31 pm
by cyberman
Yes!

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Wed Jun 25, 2008 10:13 pm
by WhiteStar99
Hi!
I wonder what postlet Filemanager you mean? (heard something with Java and FTP like)
I know of the Filemanager unter Content -> FileManager and the one "inside" TinyMCE. But I do not see any difference nor do I miss something (running a more or less standard installation).

Thanks for the security update!

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Thu Jun 26, 2008 4:51 am
by cyberman
WhiteStar99 wrote: I know of the Filemanager unter Content -> FileManager and the one "inside" TinyMCE.
You could choose it in FileManagers tab Settings, Upload method, Entry "Postlet, Java based, allows multiple file-selection" ...

Re: CMS Made Simple 1.3.1 - Security Release

Posted: Mon Jun 30, 2008 3:33 pm
by EGS
Upgrading from 1.2.5 to 1.3 to 1.3.1 was a breeze.
I recommend that everyone does so if they're still using the 1.2.x series.