Kommentare

Serendipity 1.5.1, bugfix release

Garvin am um :

We had an intensive beta period, and all reported issues were fixed. If our strain of luck weren't so tainted today, I'd say it all works to 100%...but I'll better drop this to 99,99% ;)

No, seriously: There were few changes to the Plugin API, so the chance that any plugins broke is very little. And if there were any issues left, we'll be quick to fix them, I promise.

deminy am um :

Great job! Thanks for your hard work~ I will give it a try tonight :D

mo-cacher am um :

Eben noch eine Datei hinterherschieben - wenns sonst nix ist! Wünsche frohes Fest und das übliche ;-)

Serendipity 1.5 released

Hanno am um :

"Disallow uploading any files that contain ".php." in the filename for extra security with Apache MimeMagic-Modules"

Are there attack scenarios on this? Or to be more concrete, is this a security vulnerability and 1.5 considered a security update?

Garvin am um :

This is more a security issue with running Apache and mod mimemagic, than an issue of the underlying PHP application IMHO. I would much more advise to not use this mimemagic on "general population" servers.

But yes, in this regard, it can also be considered a security update. Sorry for not having been too clear on this.