SPIP-Contrib

SPIP-Contrib

عربي | Deutsch | English | Español | français | italiano | Nederlands

290 Plugins, 198 contribs On SPIP-Zone, 90 visitors now

Home > SPIP’s Life & culture > SPIP-core > SPIP 1-8-3b / 1.9.2g / 2.0.2

SPIP 1-8-3b / 1.9.2g / 2.0.2

3 security updates !

20 January 2009 – by SPIP-Contrib’s Team, Loiseau2nuit

All the versions of this article: [English] [français]

3 Votes

3 security updates !

Hello, this an important message for all those maintaining a Spip-made website.

Three important security vulnerabilities has been signaled the week before Christmas. They were fixed as soon as they were discovered and we have released new versions. New versionS because it seems that the vulnerabilities were there for a while.

Of cource, we encourage everyone to enjoy from now the latest stable version (2.0.3) available there : http://www.spip.net/en_download

If ever you are “blocked” with an more ancient version of Spip, and while waiting to proceed to an upgrade to the latest one, you will find versions 1.8.3b and 1.9.2g in the archives repository http://files.spip.org/spip/archives/

Many thanks to Jean Bon, Julien Cayssol and Pierre Gardenat for having warned us about those vulnerabilities. Don’t hesitate to do so if you find new ones, forwarding them to the core-developpers private mailing-list : spip-team@rezo.net

If you have questions dealing with general matters, three dedicated mailing-lists are able to handle them :

Please also remind that another mailing-list “SPIP-announcement” : http://listes.rezo.net/mailman/list... (fr) is there to announce eventual problems or available Spip upgrades. Don’t hesitate to register to keep informed on Spip’s evolutions (sending frequence is very low).

To conclude, a few details about the differences noticed since the release of Spip version 2.0 (fr).

2.0.1 -> 2.0.2

  • refusing urls containing pseudo-protocol data (rev.13521)
  • Happy New Year (rev.13520)
  • Unifying layout in the three “language managment” tabs (rev.13519)
  • still a few mods on the front-office’s Agenda (rev.13517)
  • The A tag’s “type” field was still empty, on a document’s logo (rev.13512)
  • DOCUMENTS loop were not returning documents which were attached to forum posts (rev.13511)
  • Accepting notes named <*> <+> <.> and other significant characters.
  • a peeling to evacuate black point (rev.13508)
  • improving the popularity calculation (rev.13506)
  • a link was broken in the message posted to a new registered user. (rev.13504)
  • image_format now supports png8 (extension is still ’png’) (rev.13501)
  • LDAP/AD authentication, now reads the Sameaccountname (rev.13500)
  • Protecting the $is, given to calcul_branche_in (rev.13498)

2.0.0 -> 2.0.1

  • repairing a bug on standard URLs and other ancient implementations (rev.13489)
  • Problems with the “cache” directory’s creation, during the install (rev.13487)
  • minor corrections on visits calculation (rev.13485)
  • Compiler : bugs while considering the status field, in the case of a request on a main table (rev.13484)
  • Private area’s forms : corrections for IE6/7 (rev.13481)
  • It was impossible to move Spip in a sub-directory (rev.13478)

We wish you all a Happy New Year 2009.

Loiseau2nuit, translating and adapting an original post by Maïeul and Ben, (with the SPIP Team)

updated on 29 December 2016

Back to top

Comment on this article

Who are you?
  • [Log in]

To show your avatar with your message, register it first on gravatar.com (free et painless) and don’t forget to indicate your Email addresse here.

Enter your comment here Les choses à faire avant de poser une question (Prolégomènes aux rapports de bugs. )
Add a document

Back to top

Here they're talking

  • (fr) Passer un site SPIP sous https://

    23 février 2017 – 42 commentaires

    Comment migrer simplement votre site SPIP de http:// vers https:// Le protocole https:// devient de plus en plus courant : C’est mieux pour la vie privée de tous La plupart des grands sites l’a déjà adopté Certains navigateurs commencent à afficher (...)

  • (fr) SPIP 3.2, Agenda et FullCalendar

    6 juin – 20 commentaires

    Nous avions publié un article sur la manière d’utiliser FullCalendar avec SPIP 3.0 afin d’afficher des évènements sous forme d’Agenda. La version de FullCalendar a changé avec SPIP 3.2. Le présent article est donc un tutoriel adapté à SPIP 3.2. Pour (...)

  • (fr) Grappes 1.0

    23 novembre 2012 – 36 commentaires

    Présentation et nouveautés Cette version 1.0 du plugin Grappes est un portage pour SPIP 3.x. Le plugin permet de grouper des objets de SPIP dans des grappes. Les objets du core (articles, rubriques, auteurs, etc.) sont pris en charge, ainsi que (...)

  • (fr) PHANTOM (HTML5UP)

    18 juillet – commentaires

    Squelette SPIP pour intégrer le modèle Phantom de HTML5UP. https://html5up.net/phantom Installation A l’activation, le plugin installe aussi les plugins suivants : crayons, favicon, metasplus+, Couleur d’objet, champs extras, SPIP reset centre (...)

  • (fr) Cycle2

    7 août 2014 – 119 commentaires

    La seconde version de la librairie Javascript « jQuery Cycle », qui permet de produire des diaporamas, se nomme « Cycle2 » : http://jquery.malsup.com/cycle2/. Voici cette nouvelle librairie mise en plugin pour SPIP. Si vous utilisez déjà « jQuery (...)