March 1, 2012
Movable Type 5.13, 5.07, and 4.38 patch to fix the plugin template load error
Posted in News.
Note : This patch was updated on the 5th of March, 2012 after the initial release on the 1st of March. If you still see the “Template load error” after applying the initial patch, please download again and re-apply the patch. Thanks to the community feedback, we found an issue in Movable Type 5.13, 5.07, and 4.38 Security Updates and created a patch to resolve it. Due to the more strict policy in 5.13, 5.07 and 4.38, some plugins produce the “Template load error”. There are two ways to resolve this error: Fix your plugin to meet the security policy in 5.13 / 5.07 / 4.38. Apply the patch and enable AllowFileInclude configuration directive to moderate the strict security policy. It is recommended to (1) fix the plugin because AllowFileInclude weakens the protection against malicious plugins and templates. Please do not forget to disable AllowFileInclude directive once you update your plugin to the fixed version. Please refer to the following pages for details. Movable Type 5.13, 5.07, and 4.38 patch 1 release notes How to apply the patch How to fix your plugin If you are not seeing this “Template load error” after your upgrade, you don’t need to apply…
Read More
February 21, 2012
Movable Type 5.13, 5.07, and 4.38 Security Updates
Posted in News.
Movable Type 5.13, 5.07, and 4.38 were released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. The vulnerabilities were found as a result of our internal security audit, except the one reported from Trustwave (TWSL2012-003). All users must upgrade to this latest release immediately. Impact 5.13, 5.07, and 4.38 address the multiple vulnerabilities including: OS Command Injection exists in the file management system, the most serious of which may lead to arbitrary OS command execution by a user who has a permission to sign-in to the admin script and also has a permission to upload files. Session Hijack and CSRF exist in the commenting and the community script. A remote attacker could hijack the user session or could execute arbitrary script code on victim’s browser under the certain circumstances. XSS exists in templates where the variables are not escaped properly. A remote attacker could inject client-side script into web pages viewed by other users. XSS exists in mt-wizard.cgi. This vulnerability was reported by Trustwave (TWSL2012-003) Solution Please upgrade to the latest versions of Movable Type 4 or Movable Type 5. Movable Type Open Source 4.38 Movable Type Open Source…
Read More
October 8, 2011
Status of Movable Type development
Posted in News.
Having moved our case tracking system to Fogbugz on-demand, one of our favorite features is its reporting function. You can see the current activity of Movable Type development with a variety of graphs and charts. I would like to introduce some of the highlights here. Number of fixed and implemented cases The following graph shows numbers of fixed bugs and implemented features since 2007 when we started to use Fogbugz. As you can see, it is more active than ever. I should also mention that this achievement includes a lot of contributions from the community which is also shown in the long list of the acknowledgments in 5.1 release notes. You can check the live status if you have an account. If you don’t, you can create an account to report a bug or send a feature request. Number of open cases You might wonder how the submitted cases are handled. The development team is reviewing new cases on every Thursday. And periodically we conduct “a big triage” to sweep remaining cases. The following graph shows the improvement in our product management. Now all the feature request cases have been reviewed and categorized in this product backlog page. Active feature…
Read More
June 28, 2011
Bug Tracker maintenance completed
Posted in News.
We have successfully migrated our Movable Type issue tracking system to the new location. The new URL is here. https://movabletype.fogbugz.com/ I hope that you will enjoy the newest FogBugz features ! The Movable Type issue tracking system ( Fogbugz ) is currently under maintenance. We are moving this installation to the Fog Creeks’ on-demand service, and it will be back next week. Please use Movable Type Forums to report bugs during this period. Sorry for your inconvenience !…
Read More
June 22, 2011
Movable Type 5.12, 5.06, and 4.37 Security Updates
Posted in News.
Movable Type 5.12, 5.06, and 4.37 were released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. All users must upgrade to this latest release immediately. The impact of the vulnerabilities Under certain circumstances, a user who has “Create Entries” or “Manage Blog” pemissions may be able to read known files on the local file system. Versions Affected Movable Type Open Source 4.x Movable Type Open Source 5.x Movable Type 4.x ( with Professional Pack, Community Pack ) Movable Type 5.x ( with Professional Pack, Community Pack ) Movable Type Enterprise 4.x Solution Please upgrade to the latest versions of Movable Type 4 or Movable Type 5. Movable Type Open Source 4.37 Movable Type Open Source 5.06 Movable Type Open Source 5.12 Movable Type 4.37( with Professional Pack, Community Pack) Movable Type 5.06( with Professional Pack, Community Pack) Movable Type 5.12( with Professional Pack, Community Pack) Movable Type Enterprise 4.37 Movable Type Advanced 5.12 Download Download Movable Type Open Source Download Movable Type Pro Download other packages (including MT5.06) (What is the difference?) Installation/upgrade instructions Installation guide Upgrade guide Movable Type 5.12 / 5.06 / 4.37 release notes Fixed issues The…
Read More
June 8, 2011
Movable Type 5.11 and 5.051, 4.361 Security Updates
Posted in News.
Movable Type 5.11, 5.051, 4.361 were released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. All users must upgrade to this latest release immediately. The impact of the vulnerabilities A remote attacker could create, read or modify the contents in the system under certain circumstances. Versions Affected Movable Type Open Source 4.x Movable Type Open Source 5.x Movable Type 4.x ( with Professional Pack, Community Pack ) Movable Type 5.x ( with Professional Pack, Community Pack ) Movable Type Enterprise 4.x Solution Please upgrade to the latest versions of Movable Type 4 or Movable Type 5. Movable Type Open Source 4.361 Movable Type Open Source 5.051 Movable Type Open Source 5.11 Movable Type 4.361( with Professional Pack, Community Pack) Movable Type 5.051( with Professional Pack, Community Pack) Movable Type 5.11( with Professional Pack, Community Pack) Movable Type Enterprise 4.361 Movable Type Advanced 5.11 Download Download Movable Type Open Source Download Movable Type Pro Download other packages (including MT5.051) (What is the difference?) Installation/upgrade instructions Installation guide Upgrade guide New features and fixed issues Please see the release notes for new features and fixed issues in Movable Type 5.11, 5.051,…
Read More
May 24, 2011
Movable Type 5.1 and 5.05, 4.36 Security Updates
Posted in News.
After three months of the beta testing, the official release of the Movable Type 5.1 is now ready to download. Movable Type 4.36 and 5.05 are also released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. About Movable Type 5.1 Introducing Movable Type 5.1 View more presentations from Six Apart KK Please see the following links for details. What’s new in Movable Type 5.1 Movable Type 5.1 release notes Movable Type 5.1 includes a lot of feedback, patches and contributions from our community. Thank you very much for all of your help ! Movable Type 4.36 and 5.05 Security Updates The impact of the vulnerabilities A remote attacker could execute arbitrary code in a logged-in users’ web browser. A remote attacker could read or modify the contents in the system under certain circumstances. Versions Affected Movable Type Open Source 4.x Movable Type Open Source 5.x Movable Type 4.x ( with Professional Pack, Community Pack ) Movable Type 5.x ( with Professional Pack, Community Pack ) Movable Type Enterprise 4.x Solution Please upgrade to the latest versions of Movable Type 4 or Movable Type 5. Movable Type Open Source 4.36 Movable…
Read More
May 20, 2011
Movable Type 5.1 RC4
Posted in News.
The Movable Type 5.1 RC4 is available to download. The case 106201 was fixed in this release. To try RC4: Downloading beta builds Downloading MTOS nightly builds Getting the source code from GitHub Movable Type 5.1 Release Notes ( RC4 ) Slideshare: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Please see FogBugz for all cases. Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Without your feedback, it is almost impossible for developers to test the software in all of the various conditions that might occur. So please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback…
Read More
May 17, 2011
Movable Type 5.1 RC3
Posted in News.
The Movable Type 5.1 RC3 is available to download now. To try RC3: Downloading beta builds Downloading MTOS nightly builds Getting the source code from GitHub Here is the release notes for Movable Type 5.1 RC3. There are couple of bugs (such as 106201) which have been reported recently, and we may roll another RC release shortly. Movable Type 5.1 Release Notes ( RC3 ) Please see FogBugz for all cases. For more details: Slideshare: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Without your feedback, it is almost impossible for developers to test the software in all of the various conditions that might occur. So please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback…
Read More
April 26, 2011
Movable Type 5.1 RC2
Posted in News.
The Movable Type 5.1 RC2 is available to download now. This release includes several minor bug fixes and improved French localization thanks to François. To try RC2: Downloading beta builds Downloading MTOS nightly builds Getting the source code from GitHub Here is the release notes for Movable Type 5.1 RC2. Please note that minor cases are not listed here, please see FogBugz for all cases. Movable Type 5.1 Release Notes ( RC2 ) For more details: Slideshare: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Without your feedback, it is almost impossible for developers to test the software in all of the various conditions that might occur. So please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback We look forward to hearing from you !…
Read More
April 20, 2011
Movable Type 5.1 RC1
Posted in News.
The Movable Type 5.1 RC1 is now available to download. In Release Candidate 1, the development team has implemented all new features and fixed major bugs. If we don’t find any new issues at the following regression test (and your feedback is also crucial at this final momement), Movable Type 5.1 will be ready to ship around the end of May. Please check the 5.1 schedule wiki for updates toward the production release ! To try RC1: Downloading beta builds Downloading MTOS nightly builds Getting the source code from GitHub Here is the release notes for Movable Type 5.1 RC1. Please note that minor cases are not listed here, please see FogBugz for all cases. Movable Type 5.1 Release Notes ( RC1 ) For more details: Slideshare: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Without your feedback, it is almost impossible for developers to test the software in all of the various conditions that might occur. So please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback We look forward to hearing from you !…
Read More
April 5, 2011
Movable Type 5.1 Beta 4
Posted in News.
Movable Type 5.1 Beta 4 is available to download and test. Here is the release notes for Movable Type 5.1 Beta. Please note that minor cases are not listed here, please see FogBugz for all cases. Movable Type 5.1 Release Notes ( Beta 4 ) To join the beta test: Downloading beta builds Downloading MTOS nightly builds Getting the source code from GitHub For more details: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Movable type 5.1 Schedule Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback…
Read More
March 23, 2011
Movable Type 5.1 Beta 3
Posted in News.
We would like to express our deepest sympathy to those who have suffered loss on account of the terrible earthquake in Japan. It is our sincere hope that the afflicted areas may recover at the earliest time. Movable Type team in Japan have been collaborating with several local communities for the past years. Tohoku area is where MTDDC Meetup, this local support project first took place. We will continue our efforts toward the realization of recovery, constantly thinking of the people of Tohoku and neighboring areas. Here is the release notes for Movable Type 5.1 Beta. The list now includes implemented, fixed and active cases. Please note that minor cases are not listed here, please see FogBugz for all cases. Movable Type 5.1 Release Notes ( Beta 3 ) To join the beta test: Downloading beta builds Downloading MTOS nightly builds Getting the source code from GitHub For more details: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Movable type 5.1 Schedule Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback…
Read More
March 1, 2011
Movable Type 5.1 Beta 2
Posted in News.
Movable Type 5.1 Beta 2 is available to download and test. The development team is actively working on the beta, and we have already implemented 120 cases, fixed 715 cases, and there are only 120 active cases remaining. Please join the beta by downloading beta builds downloading MTOS nightly builds getting the source code from GitHub For more details: Introducing Movable Type 5.1 Movable Type 5.1 Beta manual Movable Type 5.1 Schedule Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Without your feedback, it is almost impossible for developers to test the software in all of the various conditions that might occur. So please don’t hesitate to create a new case. FogBugz: How to report your issue and feedback We look forward to hearing from you !…
Read More
February 14, 2011
Movable Type 5.1 Beta 1
Posted in News.
The Movable Type 5.1 Beta 1 is now available to download and test. Today begins a 3-month period of beta releases and official quality assurance testing. We plan to release a new beta version every two weeks until the application is stable. Once stable, we will be creating release candidates. And we are hoping to offer a stable build by mid May. Downloading Movable Type 5.1 Beta The beta builds and MTOS nightly builds are available to download from the beta page. Download the beta builds Download MTOS nightly builds Get the source code from GitHub About Movable Type 5.1 Introducing Movable Type 5.1View more presentations from Six Apart KK. Movable Type 5.1 focused on four major feature areas: Drag and drop sorting of categories and folders Faster ajax listing screens with custom filtering and sorting UI improvements in editing entries MT tags and the template editor enhancements for multi blogs Please refer to the following pages for more details. Movable Type 5.1 Beta Movable type 5.1 - Project wiki Reporting Bugs Your feedback is important to get Movable Type 5.1 ready for the final release. Without your feedback, it is almost impossible for developers to test the software in…
Read More
January 5, 2011
Movable Type development moving to GitHub
Posted in News.
New Year’s Greetings from Movable Type team, and we would like to announce a new step of the Movable Type development. We are moving Movable Type core development over to Git. Movable Type has used a public subversion repository for version control, but from January 2011, our new home is on github.com. GitHub is the most popular Git hosting, and it also provides social networking functions such as feeds, followers and the network graph to display how the team works on the repository. We believe that this transition will help our community a lot. The development process will be more transparent, easier to try the bleeding edge version of the code, and of course, you can fork your own projects ! movabletype/movabletype - GitHub GitHub, how to join There are numbers of great online tutorials. Help.GitHub - Welcome After configuring Git environment in your local machine, all you have to do is to clone the project. % git clone http://github.com/movabletype/movabletype.git % cd movabletype % make me How about FogBugz ? We will continue using Fogbugz for the issue tracking system. You can report bugs or request features in the same way. We are looking forward to seeing you on…
Read More
December 7, 2010
Movable Type 5.04 and 4.35 Security Update
Posted in News.
Movable Type 5.04 and Movable Type 4.35 were released today. These are mandatory security updates for all users. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. Impact A remote attacker could execute arbitrary code in a logged-in users’ web browser. A remote attacker could read or modify the contents in the system under certain circumstances. Versions Affected Movable Type Open Source 4.x Movable Type Open Source 5.x Movable Type 4.x ( with Professional Pack, Community Pack ) Movable Type 5.x ( with Professional Pack, Community Pack ) Movable Type Enterprise 4.x Solution Please upgrade to the latest versions of Movable Type 4 or Movable Type 5. Movable Type Open Source 4.35 Movable Type Open Source 5.04 Movable Type 4.35( with Professional Pack, Community Pack) Movable Type 5.04( with Professional Pack, Community Pack) Movable Type Enterprise 4.35 Download Download Movable Type Open Source Download Movable Type Pro (What is the difference?) Installation/upgrade instructions Installation guide Upgrade guide…
Read More
October 5, 2010
Movable Type 5.031
Posted in News.
Movable Type 5.031 was released today. This is a bugfix release without new features. It does not contain a security fix. Movable Type 5.031 fixed an issue in 5.03. 104608 : "Script Error" occurs when opening the “rebuild_confirm” screen in some hosting environments. Download Download Movable Type Open Source Download Movable Type Pro (What is the difference?) Installation/upgrade instructions Installation guide Upgrade guide Note: if you purchased a Movable Type license you can also purchase our installation or upgrade service and have all the work done by our excellent support team. Found a bug? Need a feature? To avoid duplication of efforts, search existing bugs or feature requests (from the feedback page) before submitting a new bug. Head over to the bug report/feature request form and let us know!…
Read More
September 22, 2010
Movable Type will Continue Evolving!
Posted in News.
After the recent announcement about Six Apart, some of you might have been wondering about the future of Movable Type. We can be very clear about that: of course we will continue development and support of this platform that now has a decade of history behind it. Movable Type 4 remains rock-solid blogging software for all uses. Movable Type 5 is a new step up for managing multiple sites. Melody is driven by the most enthusiastic community of bleeding-edge developers. All this software shares the same root: Movable Type, the publishing platform. Movable Type 5.1 is in the final development phase, we are anticipating a Beta release this winter. We are also planning another 4.x release to keep this mature branch up to date. All these developments are open to the public. You can check our daily activities on FogBugz and in our code repositories. And just like every open source project, we appreciate your help to make Movable Type (even) Better !…
Read More
September 8, 2010
Movable Type 5.03
Posted in News.
Movable Type 5.03 was released today. This is a bugfix release without new features. It does not contain any security fix. Details about the issues that were fixed can be found in the release note. 5.03 Release Note Download Download Movable Type Open Source Download Movable Type Pro (What is the difference?) Installation/upgrade instructions Installation guide Upgrade guide Note: if you purchased a Movable Type license you can also purchase our installation or upgrade service and have all the work done by our excellent support team. Resolved Issues in Movable Type 5.03 103927 Old comment sessions are not deleted properly. (Fixed) 104102 Cannot publish archive templates when there are multiple archives with different publishing settings. (Fixed) 104161 Cannot search older assets in ‘Insert Image’ dialog. (Fixed) 104326 Cannot add custom fields after upgrading from MT4.x when the user have changed the sort order in MT4.x. (Fixed) 104337 Error when disabling a plugin that adds custom objects and its custom fields. (Fixed) 104338 Cannot publish archive templates by Publish Queue. (Fixed) 104374 Cannot sign-in with the TypePad account that has multi byte characters in its Nick Name (Fixed) 104375 Error with SQL Server when using include_blogs=”children” at the website that…
Read More
August 29, 2010
OpenGraph Like
Posted in Plugin Directory.
This plugin adds MT tags to display various social buttons such as Facebook Like, Google Plus, Tweet, Evernote Clip, Tumblr, mixi, and gree button. The Like button lets a user share your content on social networks. When the user clicks…
Read More
July 25, 2010
Action Streams Plugin for Movable Type 5 and 4
Posted in News.
Did you notice that Action Streams and Community Action Streams plugins have been updated ? Now they work both with Movable Type 5 and Movable Type 4. Action Streams plugin collects your actions on third party web services into your Movable Type web sites. Using it, you can easily aggregate your contents from various services such as Twitter, Flickr, YouTube, and also you can write your own recipe to pull the data from millions of websites. Please download the latest version from Six Apart’s GitHub repositry, Downloads for sixapart's mt-plugin-ActionStreams - GitHub Downloads for sixapart's mt-plugin-CommunityActionStreams - GitHub and follow the steps in the documentation. Action Streams Documentation Please enjoy !…
Read More
June 14, 2010
Movable Type Theme Contest
Posted in News.
We invite you to enter the Movable Type Theme Contest 2010. Movable Type 5 allows you to create and share your innovative web designs by creating a single theme file. There are thousands of beautiful websites built upon Movable Type 5 already, and now it’s time to show off and share your achievements ! Prizes The winners of the contest will be determined by the contest judges. The winners will receive: 1st place : Adobe Creative Suite 5 Web Premium 2nd place : iPad Wi-Fi (16GB) Rules In order to participate, please observe the following rules: Convert your original, beautiful web design to a Movable Type 5 Theme, Read this tutorial and the technical details, Make sure that the theme can be installed and applied correctly on the latest version of Movable Type 5, Make sure that the design looks good in modern browsers (Internet Explorer 7+, Firefox 3.6+, Safari 4+, etc.), Make a theme file available for downloading in the .zip format, Demonstrate your design at the online demo site, Select a distribution license of your theme, Note any plugins that are required to utilize your theme. Deadline and Schedule We will accept your application until the September…
Read More
May 21, 2010
Movable Type 5.02 patch to fix the Publish Queue
Posted in News.
Thanks to the report, we found and fixed an issue in Movable Type 5.02. Movable Type 5.02 has an error in Publish Queue for archive templates. This error occurs when you publish your archive templates via Publish Queue. Run-periodic-tasks doesn’t publish archive templates properly. Only index templates are published. Please download the patched code from the release notes, and follow the instructions to put it in place. Movable Type 5.02 patch release notes…
Read More
