The first release candidate for Geeklog 1.6.1 is now available for download.

Since the beta, we've fixed a nasty bug in the Group Editor (introduced back in 1.6.0) and made refinements for the search (which required two more theme changes).

As the "release candidate" suggests, this is what we consider "almost there". So if you haven't tried out the beta, now would be a good time to give it a spin to see what's coming in the next Geeklog version. And if you find any problems, please let us know.

The first beta version of Geeklog 1.6.1 is now available for download.

This releases fixes quite a few bugs (especially with the comment handling) and rough edges in Geeklog 1.6.0. We've also thrown in some new features, e.g.

• support for meta tags (keywords and description) for articles, topics, static pages, polls, and the index page
• better timezone support
• you can now have one featured story per topic
• ... and a few more

Please note that this is a beta release, so you may not want to run it on a "live" site just yet. But please try it out and send us your feedback (or bug reports, if necessary).

Last week, an exploit was published that allows unauthorized direct uploads to a Geeklog site, using the PHP connector included with FCKeditor. The uploads still have to go through FCKeditor's filters, so it's not possible to use this to upload scripts and the integrity of the Geeklog site as such is not in danger. As it turns out, however, this exploit is now being used to host malware on some Geeklog sites. So it seems we completely underestimated the impact of this issue.

Geeklog 1.6.0sr2 is now available for download and ships with a much more restrictive configuration for uploads through FCKeditor. There's also an archive to upgrade from 1.6.0sr1 and an updated version of the drop-in FCKeditor replacement for older Geeklog versions.

If you don't use FCKeditor (aka "Advanced Editor") on your site, the easiest and safest method is to simply remove the entire fckeditor directory (from your public_html directory). Otherwise, please install one of the above updates ASAP.