“SilverStripe 3.1.9 this update includes important security fixes.”

SilverStripe CMS is an open source web content management system used by governments, businesses, and non-profit organisations around the world.

It is a power tool for professional web development teams, and web content authors rave about how easy it is to use.

As a platform, SilverStripe CMS is used to build websites, intranets, and web applications.

The modern architecture of SilverStripe CMS allows organisations to keep pace with innovation on the web.

SilverStripe CMS enables websites and applications to contain stunning design, great content, and compelling interactive and social functions.

Changes Details

File permissions

This release makes an important change to File DataObject permissions in order to close a vulnerability in file modification privileges.

Security

This release includes an important security fix.

• 2015-01-12 c49f164 Fix file and uploadfield permissions SS-2014-018.

Features and Enhancements

• 2014-11-21 31b5a9d Allow CMS re-authentication to be completely disabled if necessary (Damian Mooyman)
• 2014-12-10 fba6880 Additional extension points for Tiny MCE editing, for when images are regenerated and manipulating the HTML prior to a save (Gordon Anderson)
• 2014-11-13 d7eb275 Make the record count in GridFieldFooter optional (Jeremy Shipman)

Bugfixes

• 2015-01-08 a02adf6 Uneccessary class replacement (Michael Strong)
• 2014-12-18 5637431 The method ‘name’ does not exist on ‘Form’ (Elvinas L)
• 2014-12-15 6582162 How to folder on forms (Cam Findlay)
• 2014-12-11 b5c361a GD – check file exists before getimagesize (Will Morgan)
• 2014-12-09 6bdd30c Fix gridfield storing duplicate data in session (Damian Mooyman)
• 2014-12-09 3ac705f Feedback to name the fields section to “field types” to make it clearer what the section is about. (Cam Findlay)
• 2014-12-09 e9fd03b use GFMD code blocks to fix code formatting consistency. (Cam Findlay)
• 2014-11-25 01989aa Manifest flushing (Jonathon Menz)
• 2014-11-24 7384d01 DataDifferencer was trying to compare fields, even if the fields didn’t exist causing an error. (micmania1)
• 2014-11-18 2bdfd65 Security::findAnAdministrator doesn’t always find an admin (Damian Mooyman)
• 2014-11-10 85b4ba1 DataObject::db() doesn’t respect overloaded db types (fixes #3620) (Loz Calver)
• 2014-10-03 9d888d5 Fixed SearchForm not calling getTemplate() in forTemplate() (Stephen McMahon)
• 2014-09-02 1f4f5e6 Fix versioned Versioned is not writing Version to _version tables for subclasses of Version dataobjects which have their own DB fields – Fix disjoint of ID / RecordID (which should be the same) – Fix calculation of new record version – Fix use of empty vs !isset to check for existing version (Damian Mooyman)

[otw_is sidebar=otw-sidebar-8]

The post SilverStripe 3.1.9 Update Released appeared first on Orange Internet Solutions.

SilverStripe CMS 3.0.6 this release contains security fixes. We recommend to try upgrade soon as possible.

SilverStripe CMS is an open source web content management system used by governments, businesses, and non-profit organisations around the world.

It is a power tool for professional web development teams, and web content authors rave about how easy it is to use. As a platform, SilverStripe CMS is used to build websites, intranets, and web applications.

The modern architecture of SilverStripe CMS allows organisations to keep pace with innovation on the web. SilverStripe CMS enables websites and applications to contain stunning design, great content, and compelling interactive and social functions.

Changes Details

• Security: Require ADMIN for ?flush=1 (stop denial of service attacks)
• Security: Require ADMIN for ?flush=1 (SS-2013-001)
• Security: Privilege escalation through Group hierarchy setting (SS-2013-003
• Security: Privilege escalation through Group and Member CSV upload (SS-2013-004)
• Security: Privilege escalation through APPLY_ROLES assignment (SS-2013-005)
• Security: Information disclosure in Versioned.php (SS-2013-006)

More Information

• Try Online Demo:
  SilverStripe (Softaculous external link)
  SilverStripe Changelog (Official website, external link)

• Start SilverStripe:
  In order to use SilverStripe you need a domain name (ex. yoursite.com) and web hosting service.
  If you don’t have a domain name Register a Domain Name.
  To install SilverStripe choose one of our hosting plans. (all our packages includes Softaculous).

• Hosted SilverStripe
  Contact us if you don’t need a domain or hosting service, and want to use SilverStripe anyway.

[otw_is sidebar=otw-sidebar-8]

The post SilverStripe CMS Update 3.0.6 released appeared first on Orange Internet Solutions.