<p>The open-source CMS, SilverStripe, has a new version that's been made available. This release solves a number of potential security vulnerabilities:</p>
<ul>
<li>Draft pages were visible to unauthenticated users on specifically crafted URLs.</li>
<li>An content author with access to the “Security” section in the CMS could potentially take over an administrator account.</li>
</ul>
<p>These are now fixed in 2.4.2, along with several dozen minor bug fixes.You can review a list of the 100+ changes in <a href="http://open.silverstripe.org/wiki/ChangeLog/2.4.2">the changelog</a>.</p>
<h3>Improved Windows Support</h3>
<p>SilverStripe 2.4.2 offers increased confidence over past versions for running our software on Windows OS when using SQL Server as the database. Previously, you had to run SilverStripe on Linux for all unit tests to pass. As a result of fixing bugs and unit tests, all SilverStripe unit tests now pass when running on Windows. The work includes fixing full-text search for the <a href="http://www.silverstripe.org/microsoft-sql-server-database/">SQL Server database module</a>, fixing windows file path issues along with numerous other bug fixes for the Windows platform done in 2.4.0 and 2.4.1.</p>
<p><img style="max-width:467px" title="2.4.2-all-tests-pass" src="https://cmscritic.com/ms-content/uploads/2021/07/2_4_2-all-tests-pass_wcjpj8.png" /></p>
<h3>Other minor improvements</h3>
<ol>
<li>Allows Apache to provide better error pages</li>
<li>Improved unit testing reports</li>
<li>Fixed the installer logic for SQLite database</li>
</ol>
<p>More info: <a href="http://www.silverstripe.org">http://www.silverstripe.org</a></p>


SilverStripe CMS 2.4.2 released

2_4_2-all-tests-pass_wcjpj8

mike-johnston company logo

mike-johnston

mike-johnston Profile

The open-source CMS, SilverStripe, has a new version that&apos;s been made available. This release solves a number of potential security vulnerabilities: 
 
Draft pages were visible to unauthenticated users on specifically crafted URLs.
An content author with access to the “Security” section in the CMS could potentially take over an administrator accoun...