Not a developer? Go to MovableType.com

News

Movable Type 5.12, 5.06, and 4.37 Security Updates

By Jun Kaneko
Posted June 22, 2011, in News.

Movable Type 5.12, 5.06, and 4.37 were released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. All users must upgrade to this latest release immediately.

The impact of the vulnerabilities

Under certain circumstances, a user who has "Create Entries" or "Manage Blog" pemissions may be able to read known files on the local file system.

Versions Affected

  • Movable Type Open Source 4.x
  • Movable Type Open Source 5.x
  • Movable Type 4.x ( with Professional Pack, Community Pack )
  • Movable Type 5.x ( with Professional Pack, Community Pack )
  • Movable Type Enterprise 4.x

Solution

Please upgrade to the latest versions of Movable Type 4 or Movable Type 5.

  • Movable Type Open Source 4.37
  • Movable Type Open Source 5.06
  • Movable Type Open Source 5.12
  • Movable Type 4.37( with Professional Pack, Community Pack)
  • Movable Type 5.06( with Professional Pack, Community Pack)
  • Movable Type 5.12( with Professional Pack, Community Pack)
  • Movable Type Enterprise 4.37
  • Movable Type Advanced 5.12

Download

(What is the difference?)

Installation/upgrade instructions

Fixed issues

The following issues were fixed in MT5.12.

  • 106303 Published URL was changed after upgrading to 5.1x

The following issues were fixed in Movable Type 5.12, 5.06, and 4.37.

  • 106307 Permission error when saving custom fields settings without a system administration privilege
Back

16 Comments

PRO IT Service

PRO IT Service on July 28, 2011, 10:34 a.m. Reply

Also, good if you could share with us what is your plan for the upcoming versions, say v5.13 and v5.14.

I personally look forward to see the ability of having blogs without a parent website, at least when upgrading an earlier series (say v3.x or v4.x) to movable type v5.x.

Many thanks, Mihai Bocsaru

bet365

bet365 on November 6, 2011, 10:44 a.m. Reply

I totally agree with Mihai Bocsaru, I would really appreciate it if you could share with us what is your plan for the upcoming versions, say v5.13 and v5.14.

Waiting for an answer. Thank you very much!

Regards, Ionut Pop

como aclarar la piel

como aclarar la piel on April 12, 2012, 5:47 a.m. Reply

Hi,

I`m new whit movable but I try to do my best. I have a question: what are the risks of the upgrade?

genf20 plus review site

genf20 plus review site on June 8, 2012, 12:51 a.m. Reply

This versions are already updated to new ones because of flows in security features.

Dieta Dukana

Dieta Dukana on July 16, 2012, 10:31 a.m. Reply

These updates are awesome, thanks to the developers for the amazing work you guys are doing.

Male Enhancement

Male Enhancement on July 30, 2012, 2:59 a.m. Reply

It’s cool, indeed to see continuous updates. Let us appreciate the developers effort.

7m

7m on July 31, 2012, 11:52 p.m. Reply

A blog is sometimes referred to as an online personal journal. It is a site designated for an individual to write about his/her daily experiences, to illicit thoughts and often allowing readers to offer their comments.

Diety25

Diety25 on August 2, 2012, 5:53 a.m. Reply

Hey great article, nice site. Loooks very professional really gotta see some more.

thanks for that and keep up the good work

Greetings

6 weidera on August 18, 2012, 12:21 a.m. Reply

Thank you for the newest versions.

Graduaciones

Graduaciones on September 10, 2012, 1:31 a.m. Reply

Thank you for sharing great information to us.

Spiele

Spiele on September 10, 2012, 3:27 a.m. Reply

Movable Type is great, thanks for the updates.

Fetele Norocoase forum

Fetele Norocoase forum on October 1, 2012, 6:29 a.m. Reply

The update revealed some security issues but they were quickly resolved by the MovableType team in the next updates. For those who haven’t updated yet, it’s time to do so before someone exploits those issues.

foczita

foczita on October 4, 2012, 7:07 a.m. Reply

Thank you for sharing great information to us. foczita kliknij

telefonkatalogen.biz

telefonkatalogen.biz on October 11, 2012, 3:20 a.m. Reply

I really appreciate the info you showed there. Keep doing what you’re doing. Resources like the one you mentioned here is very useful.

Short Haircuts

Short Haircuts on October 21, 2012, 12:29 p.m. Reply

Thank you for letting us know. http://www.weaving.biz

Como aclarar la piel ya

Como aclarar la piel ya on November 5, 2012, 1:04 p.m. Reply

Thank you for the new version!