Movable Type 4.24 发布

抓紧时间升级吧。这次升级有关安全问题,属于强制升级。

Movable Type 4.24

主要的更新在于密码找回功能中。
原先使用的密码找回功能模块,有重大安全漏洞,所以必须更新。

* Release Type: Security Release. This update fixes a serious potential vulnerability which has not yet been exploited in the wild.
* Mandatory? Yes, this is a mandatory security upgrade.
* Performance Implications: None.
* Plugins Affected: None. Your current plugins should continue to work as expected.
* Templates Affected: None.
* System Requirements: This release has no new or additional system requirements.
* Licensing considerations: None. MT 4.24 is a free update for users of any version of MT 4.x.
* Upgrade Fatigue: No further mandatory updates are planned for Movable Type 4.2.

更新之前,请注意做好备份,在我更新的几个Blog中,只有一个原先用于测试的Blog反而出现升级问题,其它正式在使用的,升级过程非常顺利。

安全问题被黑客利用,再应用于链接建立,已经走得很远了,Zac有过专门的话题,所以一旦有重大更新,我总是及时做好,害人之心不可有,防人之心不可无啊。