Latest from the umbraco blog

We're more transparent than glass. Follow us on twitter and our blog.

 

Thursday, August 21, 2014 by Sebastiaan Janssen

We hope you had a great summer! Here at Umbraco in Denmark we sure did enjoy the one month of warmth we were giving and are hoping for a bit of an Indian summer soon. 

Oh, and of course we have also been working on Umbraco, fixing a lot of bugs, the result of which is here right now, it's version 7.1.5!

What's new? Apart from all those lovely bugfixes you might notice a few interesting things; clicking the recycle bin now give you a nice listview overview of items in the trash.

2014-08-21_110945

Speaking of the list view, our friend Andy Butland sent us another delicious pull request making the listview much more performant when you have a lot of child nodes. He also made the search function in the list view better and the paging now actually works properly when you have sorted or searched. 

And other pull requests keep coming in as well, in fact 37 of the 104 closed issues for this release were a direct result of a pull request made by community members! Thanks everyone, awesome work, #h5yr!

So without further ado: go check out the list of fixed issues and download 7.1.5.

Update: after finding a few unfortunate bugs, we've released Umbraco 7.1.6 a few days later.

Friday, August 08, 2014 by Tim Geyssens

umbraco-festival-talk_462x308Didn’t make it to Codegarden or feeling the cg blues? Luckily our wonderful community is organizing conferences and meetups around the globe.

umbOktoberfest

At the end of August you can join our German friends for Germany's only Umbraco conference that takes place in Frankfurt August 29th 2014. Featuring 10 sessions (in 2 tracks) and ending with the official umbOktoberfest TramParty!

Umbraco DK Festival

After Codegarden this is the second festival in Denmark. This is a community driven festival and takes place in Aarhus, Denmark on September 12th. This one will be held in Danish, more info can be found on http://umbdkfest14.umbraco.io/

Umbraco UK Festival

The UK festival will be held November 21st in London (like usual). After codegarden this is the biggest conference in attendee numbers, it always sells out! So keep an eye on http://umbracoukfestival.co.uk/ for when they release more details.

uWestFest

The Umbraco festival in Northern America, after the successful first edition this year, uWestFest will be back in 2015 (March 6).  You can already secure your ticket to meetup with fellow Umbracians in Orlando, Florida.

Meetups

Besides full blown festivals there are also a lot of casual meetups. To get an overview of those check out meetup.com, just filter on umbraco and you’ll see the different groups and the calendar.

 

See you there?

Monday, July 21, 2014 by Sebastiaan Janssen

As Umbraco becomes more popular, there's also more people hiring security specialists to analyze our source code for potential vulnerabilities. We applaud this, a fresh view on things can often reveal issues that have been overlooked so far.

Today we're publishing the results of 2 independent security audits that uncovered some issues that you need to be aware of and fix in your Umbraco installations.

Of course we're in the process of fixing these problems for future versions of Umbraco where necessary but many currently running live sites are affected and need updates immediately.

We advise you to update or remove the following files:

  • Update: umbraco\Developer\Packages\proxy.htm with the updated version found in this Github commit.
    Affected versions: all versions 4, 6 and 7
    Impact of updating this file: none.
  • Delete: umbraco\Dashboard\Swfs\AIRInstallBadge.swf
    Affected versions: 4.6.1 through 6.2.1 (v7 is not affected)
    Impact of deleting this file: you won't be able to install Desktop Media Uploader from the backoffice any more, it can still be installed by installing the umbraco\Dashboard\air\DesktopMediaUploader.air file.
  • Delete: Config\Splashes\booting.aspx
    Affected versions: all versions 4, 6 and 7
    Impact of deleting this file: you would only see the "booting" screen if your site takes more than 10 seconds in the phase where Umbraco is starting and cannot serve more than one request, removing this file gives a blank screen instead of the "booting" screen (hardly anybody will ever have seen this screen in the first place).
  • Delete: the install folder
    Affected versions: 4.9.0 through 6.1.6 (6.2.0+ and 7 are not affected)
    Impact of deleting this file: none - we've always advised to delete the install folder immediately after installing Umbraco and never to upload it to a live server.

Please take this advisory seriously and take immediate action to secure your running sites properly.

If you have any questions make sure to leave a comment and remember that this blog doesn't send notification e-mails so check back here to find the answer to your questions.