Archive
Monthly
Go
|
|
DNN Blog
May
30
Posted by:
Sebastian Leupold
5/30/2007
DotNetNuke Version 4.5.3 has been released today as a quick update. Its mai purpose was to fix two security related issues. The complete list of changes reads as follows:
banner advertising disabled for all users by default
tab permission grid issue, where individual user permissions affected "all users" role's permission
incorrect display of "Upgrade available" icon for Layout Objects in Module Definitions eliminated
issue with login page redirect after signin corrected
updated ModuleControl definition for Adsense module and FeedbackExplorer, removing SolutionsExplorer
problem with [custom] tokens in system messages fixed
3 comment(s) so far...
Re: DNN 4.5.3 Change Log
You mentioned that there were two security related fixes in 4.5.3. I don't see a Security Bulletin posted for them.
Can you give more information on the severity rating (or other description) of those issues? (I need them for servicing a security update for a client.)
Thanks!
By dagilleland on
6/1/2007
|
Re: DNN 4.5.3 Change Log
Dagilleland,
there is no intrusion risk, it is more an UI issue to misconfigure page permissions, granting unwanted permissions to all users if not being careful, when saving page settings. The risk only shows up, if you are assigning permissions to individual users (newly introduced in DNN 4.4.1)
By leupold on
6/1/2007
|
Re: DNN 4.5.3 Change Log
Thanks!
I have actually seen that problem occur. Good to know it's been rectified!
- Dan
By dagilleland on
6/1/2007
|
|