News

Geeklog 1.6.0sr1 and 1.5.2sr5 address the following security issues:

1. Gerendi Sandor Attila reported an XSS in the forms to email a user and to email a story to a friend.
2. The "Mail Story to a Friend" function didn't check story permissions, so that it was possible to email a story even if you didn't have the permissions to view it on the site.

For Geeklog 1.6.0, we also fixed two bugs (an SQL error when the story submission queue was off and a call to a nonexistent function).

The following files are available:

• a complete tarball of Geeklog 1.6.0sr1
• an upgrade archive from Geeklog 1.6.0
• an upgrade archive from Geeklog 1.5.2sr4
• a combo update from any previous 1.5.2 version

The Geeklog Team is pleased to announce that Geeklog 1.6.0 is now available for download.

This release incorporates the results of our successful 2008 Google Summer of Code students, namely site migration and improved plugin installation (by Matt West), improved search (by Sami Barakat), and improved comments functionality (by Jared Wenerd). It also includes a new plugin to automatically generate sitemap.xml files (by mystral-kk) and a few other improvements. See below for details.

The second Release Candidate for Geeklog 1.6.0 is now available for download. Barring any surprises, this should also be the last stop before the release of the final 1.6.0.

This releases includes fixes for the FCKeditor security issue, some more fixes for the migration option of the install script, a fix for searches by date, and some more updated translations.