Jump to content

4.1.19

Mark

By Mark

  • Released 03/14/2017
  • Current release: No
  • Beta release: No
  • Soft release: No

  • An issue has been identified where certain hooks may stop working on 4.1.19. If you are having problems with some third party plugins or applications, upload this file:

    If you are encountering problems with services that rely on outbound connections such as Sparkpost, Gravatar, RSS Imports etc please upload the following files:

    If you are encountering an issue where the "Recalculating members' content count" background process never finishes, please upload the following file:

    If you encounter an issue where not all forums are displayed when attempting to split posts or perform other similar actions, please upload the following file:

This release focuses on bug fixes and performance. You should see speed improvements. New features include:

  • A new moderator setting to restrict users from ignoring moderators.
  • A new group setting to allow members to lock their own content.
  • A new group setting to hide a group from filters in search.
  • When moving content moderators are now prompted for where you want to be redirected after the action.
  • Activity Streams can be created with condensed view as default.
  • An email is now sent when an account is locked for too many bad login attempts.
  • When editing a member in the AdminCP, it will now show how much of their messenger storage quota is being used.
This is a security release and we recommend all clients upgrade as soon as possible.

This release contains two stored XSS security fixes caused by:

  • Profile cover photos not being properly checked to be valid images
  • Sidebar block titles not being properly escaped (this can only be triggered by moderators who have permission to edit the sidebar)

We would like to thank @newbie LAC for responsibly reporting these issues to us.