BurstOpen » News http://burstopen.com Open source web development Mon, 12 Jan 2009 04:59:09 +0000 en hourly 1 http://wordpress.org/?v=3.3.2 Coppermine 1.4.14 http://burstopen.com/coppermine-1414/2007/11/07/ http://burstopen.com/coppermine-1414/2007/11/07/#comments Tue, 06 Nov 2007 23:46:50 +0000 Chris http://burstopen.com/coppermine-1414/2007/11/07/ The coppermine gallery team have released a security update to version 1.4.14. This is a fix for (another) new XSS vulnerability – immediate update highly recommended.

Coppermine downloads page

]]> http://burstopen.com/coppermine-1414/2007/11/07/feed/ 0 WordPress 2.3.1 http://burstopen.com/wordpress-231/2007/11/03/ http://burstopen.com/wordpress-231/2007/11/03/#comments Fri, 02 Nov 2007 21:42:32 +0000 Chris http://burstopen.com/wordpress-231/2007/11/03/ Following on from the new version 2.3 is a bug-fix release with some security implications. Although these seem to be fairly minor (eg. possible XSS vulnerability with register_globals on) if you’ve moved to 2.3 then you should now upgrade to 2.3.1.

There are no updates for the last version in the 2.2 branch (2.2.3) so if that’s what you’re on it’s probably safe to stay there for a while longer (but plan to update to 2.3.x soon):

WordPress download page

]]> http://burstopen.com/wordpress-231/2007/11/03/feed/ 0 Vanilla 1.1.4 http://burstopen.com/vanilla-114/2007/10/23/ http://burstopen.com/vanilla-114/2007/10/23/#comments Tue, 23 Oct 2007 05:28:27 +0000 Chris http://burstopen.com/vanilla-114/2007/10/23/ There is a serious vulnerability in Vanilla 1.1.3 and below, allowing remote SQL injection. A security update has been released – upgrading requires just replacing the affected files, as listed on the Vanilla upgrade page.

With exploit code already published this is an urgent mandatory update – don’t delay!

Download Vanilla forum

]]> http://burstopen.com/vanilla-114/2007/10/23/feed/ 0 WordPress 2.3 http://burstopen.com/wordpress-23/2007/09/27/ http://burstopen.com/wordpress-23/2007/09/27/#comments Thu, 27 Sep 2007 12:23:25 +0000 Chris http://burstopen.com/wordpress-23/2007/09/27/ Version 2.3 is a significant scheduled release with many new features. Although many bugs have been ironed out through several recent release candidates it’s likely that with all the new code there will be some problems still to find.

At the time of writing I don’t know of any security issues in the previous version 2.2.3 so the more cautious may prefer to keep this for a week or two… For those who prefer the latest and greatest:

WordPress download page

(Naturally, BurstOpen is now running on WordPress 2.3!)

]]> http://burstopen.com/wordpress-23/2007/09/27/feed/ 0 SMF 1.1.4 http://burstopen.com/smf-114/2007/09/26/ http://burstopen.com/smf-114/2007/09/26/#comments Tue, 25 Sep 2007 21:48:05 +0000 Chris http://burstopen.com/smf-114/2007/09/26/ Simple Machines have released an update to the SMF forum – version 1.1.4. An update for the 1.0 branch (1.0.12) has also been released.

This is a bug-fix release and a required update. Users of version 1.1.x can update through the SMF admin center.

]]> http://burstopen.com/smf-114/2007/09/26/feed/ 0 Vanilla 1.1.3 http://burstopen.com/vanilla-113/2007/09/24/ http://burstopen.com/vanilla-113/2007/09/24/#comments Mon, 24 Sep 2007 11:06:29 +0000 Chris http://burstopen.com/vanilla-113/2007/09/24/ Lussumo has released a new version of the minimal forum application Vanilla with  bug-fixes including at least one security fix (XSS vulnerability). This is a required update.

Download Vanilla forum

]]> http://burstopen.com/vanilla-113/2007/09/24/feed/ 0 Coppermine 1.4.13 http://burstopen.com/coppermine-1413/2007/09/16/ http://burstopen.com/coppermine-1413/2007/09/16/#comments Sun, 16 Sep 2007 11:00:35 +0000 Chris http://burstopen.com/coppermine-1413/2007/09/16/ The coppermine gallery team have released a security update to version 1.4.13. This is a fix for a new XSS vulnerability and a mandatory update.

Coppermine downloads page

]]> http://burstopen.com/coppermine-1413/2007/09/16/feed/ 0 WordPress 2.2.3 http://burstopen.com/wordpress-223/2007/09/10/ http://burstopen.com/wordpress-223/2007/09/10/#comments Mon, 10 Sep 2007 11:30:57 +0000 Chris http://burstopen.com/wordpress-223/2007/09/10/ This is a bugfix and security release including some high-priority fixes. Required update.

WordPress download page

]]> http://burstopen.com/wordpress-223/2007/09/10/feed/ 0 WordPress 2.2.2 http://burstopen.com/wordpress-222/2007/08/07/ http://burstopen.com/wordpress-222/2007/08/07/#comments Tue, 07 Aug 2007 11:23:05 +0000 Chris http://burstopen.com/wordpress-222/2007/08/07/ This is a bugfix + security release and a required update.

WordPress download page

]]> http://burstopen.com/wordpress-222/2007/08/07/feed/ 0 Opening only the top docking box http://burstopen.com/docking-boxes-dbx-by-brothercake-defaulting-to-open-only-the-top-box/2007/08/01/ http://burstopen.com/docking-boxes-dbx-by-brothercake-defaulting-to-open-only-the-top-box/2007/08/01/#comments Wed, 01 Aug 2007 08:27:06 +0000 Chris http://burstopen.com/docking-boxes-dbx-by-brothercake-defaulting-to-open-only-the-top-box/2007/08/01/ This site makes extensive use of the clever Docking boxes (dbx) by Brothercake. Among the many setup options is the choice of default state – open or closed boxes – on the visitor’s first visit to a page. But I wanted something a bit different – the top box open and all others closed. The simplest way to achieve this is a tiny hack to the dbx.js file. Note that this file is compressed to reduce loading time (comments and whitespace removed), so edit with care, as follows:

Open the file with your favourite text editor and find “else if(!this.defopen”. A few characters further on look for “for(i=0; i<len; i++)”. Change that 0 to a 1 and you’re done!

]]> http://burstopen.com/docking-boxes-dbx-by-brothercake-defaulting-to-open-only-the-top-box/2007/08/01/feed/ 0