Support Forum

The PostNuke development team is pleased to announce the release of PostNuke .762. This release addresses a number of issues found since the release of .761, and also introduces new security enhancements.

PostNuke .762 has been audited by Maksymilian Arciemowicz of http://www.securityreason.com for security vulnerabilities, and as a result a great deal of work on security has gone into this release. The PostNuke team thanks Maksymilian for his work, and we hope this will improve PostNuke's existing strong security record. Further audits will be carried out on the PostNuke .8 codebase prior to release.

As a result of the security enhancements in .762, it is advised that all site administrators update their sites immediately to ensure they stay secure.


Addition of SafeHTML Class
To better protect PostNuke websites against the risk of Cross Site Scripting (XSS) attacks, the SafeHTML class has been included in this version. This class offers greater protection against many forms of XSS, over and above that provided in previous versions.


Downloads
As before, both a full and patch download are available. Download the full distribution if you are installing a new site or upgrading from .760 or earlier. Users currently running a .761 site can download the patch release which contains changed files between .761 and .762 only.
Upgrading with the patch version is simple, just replace the files, users upgrading with the full distribution should follow the instructions in docs/manual.txt.

References:
http://news.postnuke.com/Article2754.html
http://news.postnuke.com/...iewdownload-cid-1.html

Andreas Krapohl [larsneo]
PostNuke CMS Development Team

Thanks for the update!

Does the current PSAK work with the new version?

-----
AlarConcepts

Yes, there should be no compatibility issues at all, the changes between versions are minimal

-----
Regards,
Simon

itbegins.co.uk - PostNuke Consulting

Please read the Support Guide

Minimal = 4Mb unzipped!

:D

Thanks Simon...

-----
AlarConcepts

The patch process went nice and smooth and I'm already done a handful of sites.

...unzip, upload, accept overwrites, test the site to be sure, done.



-----
AlarConcepts

Quote

Minimal = 4Mb unzipped!

This is mainly the result of upgrades to both ADOdb and Smarty included in this release.

-----
Regards,
Simon

itbegins.co.uk - PostNuke Consulting

Please read the Support Guide

I was just being a shiznit...sorry.

I don't care if it's 10Mb... security is a must!

...and a BIG thanks to all who help out...not only with security, but with it all...

-----
AlarConcepts

note: keep in mind to deactivate/remove/delete the languages module when updating previous versions

-----
regards from germany
..::[PostNuke CMS]::.. ..::[SEO-Blog]::.. ..::[CMS Sicherheit]::..

Thanks for the update!

Regard

-----
http://www.lifestyledirectories.com -Your one-stop source for free articles

larsneo

note: keep in mind to deactivate/remove/delete the languages module when updating previous versions

I do not see that mentioned in the Upgrade instructions.



-----
RikR

The advice with regard to the languages module was a security advisory, rather than part of the upgrade process and so was not mentioned in the upgrade instructions.

-----
Regards,
Simon

itbegins.co.uk - PostNuke Consulting

Please read the Support Guide