05.06.08

Rating:        Based on 2 ratings
Reviewed:  1 review
Downloads: 8481
Released: Jul 11, 2012
Updated: Jul 11, 2012 by israelmartinez
Dev status: Stable Help Icon

Recommended Download

Application 5.6.8 - New Install
application, 26071K, uploaded Jul 9, 2012 - 2010 downloads

Other Available Downloads

Application 5.6.8 - Version Upgrade
application, 18180K, uploaded Jul 9, 2012 - 4740 downloads
Application 5.6.8 - Source Code (New Install + Source Code)
application, 32011K, uploaded Jul 9, 2012 - 710 downloads
Application 5.6.8 - Symbol Files
application, 1447K, uploaded Jul 9, 2012 - 200 downloads
Application 5.6.8 - Web Platform Installer
application, 26110K, uploaded Jul 9, 2012 - 216 downloads
Application 5.6.8 - Visual Studio Starter Kit
application, 25922K, uploaded Jul 9, 2012 - 383 downloads
Application 5.6.8 - Core API Help File
application, 27592K, uploaded Jul 9, 2012 - 222 downloads

Release Notes

Major Highlights

  • Please notice the security fixes

Security Fixes

  • Fixed issue that caused the database to fail to distinguish between "deny" and "allow" folders and could potentially reveal the names of folders the user did not have access to.
  • Fixed issue that made possible to use a specially crafted URL to directly load a module, and due to a flaw in the logic, at that time the module permissions were not correctly loaded, but instead the page permissions were applied.
  • Improved data sanitation in the lists module that could lead to a reflective cross-site scripting (XSS) issue.

Updated Modules/Providers

Modules

  • none

Providers

  • none

Reviews for this release

     
Tried to upgrade from 5.4.4. Twelve components failed to install, including DDRMenu, DNNCE-CoreMessaging, Journal, MemberDirectory, MobileManagement, PreviewProfileManagement, RazorHost, SocialGroups, HTML-CommunityInstall, Taxonomy, RadEditorProvider. Tried upgrade from 5.4.4 to previous version 5.6.7 - worked fine. 5.6.7 upgrade to 5.6.8 worked fine
by RichardBrand on Jul 13, 2013 at 12:15 AM