Not a developer? Go to MovableType.com

News

Movable Type 5.1 and 5.05, 4.36 Security Updates

By Jun Kaneko
Posted May 24, 2011, in MT5.

After three months of the beta testing, the official release of the Movable Type 5.1 is now ready to download. Movable Type 4.36 and 5.05 are also released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x.

About Movable Type 5.1

Please see the following links for details.

Movable Type 5.1 includes a lot of feedback, patches and contributions from our community. Thank you very much for all of your help !

Movable Type 4.36 and 5.05 Security Updates

The impact of the vulnerabilities

A remote attacker could execute arbitrary code in a logged-in users' web browser. A remote attacker could read or modify the contents in the system under certain circumstances.

Versions Affected

  • Movable Type Open Source 4.x
  • Movable Type Open Source 5.x
  • Movable Type 4.x ( with Professional Pack, Community Pack )
  • Movable Type 5.x ( with Professional Pack, Community Pack )
  • Movable Type Enterprise 4.x

Solution

Please upgrade to the latest versions of Movable Type 4 or Movable Type 5.

  • Movable Type Open Source 4.36
  • Movable Type Open Source 5.05
  • Movable Type Open Source 5.1
  • Movable Type 4.36( with Professional Pack, Community Pack)
  • Movable Type 5.05( with Professional Pack, Community Pack)
  • Movable Type 5.1( with Professional Pack, Community Pack)
  • Movable Type Enterprise 4.36
  • Movable Type Advanced 5.1

Special thanks to Alfasado, Eldar Marcussen and other reporters for reporting these security issues.

Download

(What is the difference?)

Installation/upgrade instructions

Back

16 Comments

perlmonkey

perlmonkey on May 25, 2011, 6:03 a.m. Reply

Congratulations, 5.1 looks impressive :)

Helicopter Game

Helicopter Game on April 10, 2012, 1:17 a.m. Reply

Very great post. I simply stumbled upon your weblog and wished to say that I’ve really loved browsing your weblog posts.Helicopter Game After all I’ll be subscribing for your rss feed and I’m hoping you write once more very soon!

thesupermanstamina

thesupermanstamina on May 1, 2012, 10:17 p.m. Reply

Really love these new updates.

james1989

james1989 on June 25, 2012, 11:20 p.m. Reply

Gongratulations on the 5.1 version! Already installed it and looks and runs great so far!

Anglena Crook

Anglena Crook on July 4, 2012, 11:54 a.m. Reply

I don’t have any doubt on the given information because the publishing source is so authentic.

silvestro

silvestro on July 6, 2012, 1:10 p.m. Reply

I hardly ever write comments on blogs, but your article urged me to praise your blog. Thanks for the read, I will surely favorite your site and check in occasionally.

sbobet

sbobet on August 1, 2012, 1:10 a.m. Reply

It feels good to find such an interesting topic on the internet like this one nowadays.

Click here

Click here on August 1, 2012, 10:06 a.m. Reply

Very essential security update. I have been using movable type for my http://www.tejkohlibusiness.co.uk/ blog for about 2 years and I was really waiting for such an update.

shumail

shumail on August 5, 2012, 3:49 a.m. Reply

Well this update was much needed and a crucial update, good work guys!

Nazar Suraksha Kavach

Nazar Suraksha Kavach on August 17, 2012, 9:27 p.m. Reply

Hi i found these type of article.thanks for providing us..

Graduaciones

Graduaciones on September 10, 2012, 1:16 a.m. Reply

I want to blog on my movable type blog from my iPad. The problem? If I take pictures on my iPad I cannot upload them to my blog because the blog doesn’t know where to find them on the iPad….

shareman

shareman on September 24, 2012, 4:16 a.m. Reply

Great!! Time to upgrade my website. Hope that there wont be any security flaws like the older ones.

Orlando Painters

Orlando Painters on October 31, 2012, 11:00 p.m. Reply

Is your web page managed by Going Type? If so, what are your thoughts regarding the update and why would you recommend it over competitive techniques.

coowendy

coowendy on November 5, 2012, 4:27 p.m. Reply

I am learning about affiliate marketing at the moment

iwin.vn

iwin.vn on November 5, 2012, 7:54 p.m. Reply

I think the article may have confused people regarding extensions and plugins. You can extend MT without paying for stuff, though there will be paid extensions available as well - the same is true with a lot of OSS software.

Massagem Tantrica

Massagem Tantrica on November 12, 2012, 6:14 a.m. Reply

Good work, i agree in one of the biggest sources for everything you need. This holds true for an outdoor sign or for an internet sign bearing your advertising. Thanks for sharing!