Geeklog 1.7.1sr1 is now available

1 min read

Some updates from the Geeklog universe:

Geeklog 1.7.1sr1 addresses an XSS in the Configuration admin panel, reported by Aung Khant of the YGN Ethical Hacker Group. Due to the built-in CSRF protection this weakness is somewhat harder to exploit but we would nonetheless advise that you secure your site by installing this update ASAP.

In addition to the complete 1.7.1sr1 tarball, there are also update files for Geeklog 1.7.1 and for Geeklog 1.6.1sr1 that contain only a fixed version of the affected file (see the included README file for installation instructions).

Users of older Geeklog releases should consider upgrading to Geeklog 1.7.1sr1 soon (use the complete 1.7.1sr1 tarball to upgrade from any older version).

A note for those who are still running on PHP 4: There's a known bug in the Static Pages plugin in Geeklog 1.7.1 that makes it incompatible with PHP 4. We will address this issue in a future bugfix update. In the meantime, consider upgrading to Geeklog 1.6.1sr2 – or upgrade to PHP 5, if possible.

Previous article

Drupal 7.0 RC 4 Released

The fourth and (hopefully) final release candidate of Drupal 7 is now available for testing. The Drupal team have announced a tentative release date of

Drupal 7 released and ready for public consumption
Next article

Drupal 7 released and ready for public consumption

One of the most popular content management systems of all time has a new major release available. The final version of Drupal CMS version 7.


🎉 You've successfully subscribed to CMS Critic!