News items tagged with "patch"

We've gone ahead and released a new version (Christmas Consolidation) to help consolidate recent patches and reduce confusion.  Though this patch primarily addresses anomalies introduced with the recent XSS exploit fix, it also adds some new and updated features from the development code. 

To address some of the anomalies introduced in the recent patches to versions 2.1.4 and 2.2.3, we've issued v2.1.4 patch #7 and v2.2.3 patch #10.  This should solve the inability to delete files within the file manager, fix a navigation module permissions issue, and make the XSS security fix more robust.  You can find the patches here.

(Updated Patches are available for download - you may also pull from the 'master' repository!) After a number of false starts, we've finally fixed a security issue (identified by Mayuresh Dani and Narendra Shinde from qualys.com) in our current release and some of our older versions and now have a patches available to fix this specific issue:

Please do NOT install v2.3.1 Patch #1/#2/#3, v2.2.3 Patch #6/#7/#8, nor v2.1.4 Patch #3/#4/#5!  They may cause WYSIWYG text to become garbled when saving (on a server with php versions less than v5.4.0 with 'magic quotes' turned on), and would strip scripts when saving a Code Snippet module.  We have recently released a universal (server) fix for these versions.

The fourth patch to address issues in v2.3.0 (stable, patch#1, patch#2 and patch#3) has been released.  This patch can be applied to any site already running v2.3.0, v2.3.0patch1, v2.3.0patch2, or v2.3.0patch3.  This patch is almost as large as a full version, therefore, you can expect v2.3.1 to be released in the coming weeks.  The code is already fixed in the 'master' git repo and the patch file can be downloaded from sourceforge.net here.  This patch updates many 3rd party libraries and fixes these issues:

We've fixed a couple of nasty bugs in some of our older versions and now have a patch available to fix these two specific issues:

The third patch to address issues in v2.3.0 (stable, patch#1 and patch#2) has been released.  This patch can be applied to any site already running v2.3.0, v2.3.0patch1, or v2.3.0patch2.  The code is already fixed in the 'master' git repo and the patch file can be downloaded from sourceforge.net here.  This patch updates a few 3rd party libraries and fixes these issues:

Refreshed 31 May @ 2:30pm EDT to fix blank showall views (Requires re-loading patch and then clearing Smarty cache).
The second patch to address issues in v2.3.0 (stable and patch#1) has been released.  This patch can be applied to any site already running v2.3.0 or v2.3.0patch1.  The code is already fixed in the 'master' git repo and the patch file can be downloaded from sourceforge.net here.  This patch updates a few 3rd party libraries and fixes these issues:

The first patch to address issues in v2.3.0 (stable) has been released.  This patch can be applied to any site already running v2.3.0.  The code is already fixed in the 'master' git repo and the patch file can be downloaded from sourceforge.net here.  This patch updates a few 3rd party libraries and fixes these issues:

The fourth patch to address issues in v2.2.3 (stable),  v2.2.3 patch #1, v2.2.3 patch #2, and v2.2.3 patch #3, has been released.  This patch can be applied to any site already running v2.2.3, v2.2.3patch1, v2.2.3patch2 or v2.2.3patch3.  The code is already fixed in the 'master' git repo and the patch file can be downloaded from sourceforge.net here.  In addition to the fixes found in patches #1, #2, and #3, this patch fixes these issues: