Craft CMS Critical Update: Info from P&T's Brad Bell

Update: 2016-07-05

Description

Recently in the CraftCMS world... Build 2.6.2791, Craft's first ever critical update, addresses a clever template injection vulnerability. Pixel & Tonic released a fix in less than 24 hours from initial disclosure, and you should definitely make sure you've updated. In this episode, Brad Bell walks us through how the exploit works and how they patched it.

Comments

In Channel

#dotall2017 Recap

2017-10-2616:53

AMP-ing up your content, Solspace Freeform, Meetups, and kangaroos

2016-12-0617:09

Multi-Site features coming to Craft 3

2016-09-1512:40

Craft 3 is awake again, and Yii 2 is AWESOME

2016-09-0716:30

Craft CMS Critical Update: Info from P&T's Brad Bell

2016-07-0516:04

The Security Episode: Craft Security best practices, ImageMagick, Sherlock, and more

2016-05-3110:55

Andrew's birthday presents to everybody, Solspace Calendar, and COME TO GEEUP!

2016-05-0824:49

Eager loading in the CP, template modes, deprecation errors, PDF emailing, and more!

2016-04-1914:53

Craft 2.6 is here! Eager loading! Rich Text links! Lange deutsche Wörter!

2016-03-1126:38

Debugging tools, a Flexbox polyfill, and Craft Case Studies

2016-02-1921:09

Lettering, Sprout Email, Reservations + Commerce, Straight Up Hangouts, & a new Link List

2016-02-0612:42

Search Plus, The Continuing Saga of ??, CraftCMS market share, PeersConf, GeeUp

2016-01-2914:06

Sprout Reports, Reasons, Embedded Assets, Contact Form, and P&T's plugins are MIT-licensed!

2016-01-2215:58

PluginFactory.io, SEOmatic, Null coalescing, Craft CLI, and I CAN PUT URL FRAGMENTS IN MY RICH TEXT EDITOR!!!!

2016-01-1517:32

00:00

Craft CMS Critical Update: Info from P&T's Brad Bell

Michael Rog & Andrew Welch

#box-pro-ellipsis-176256766237357{-webkit-line-clamp:2;}Craft CMS Critical Update: Info from P&T's Brad Bell

Craft CMS Critical Update: Info from P&T's Brad Bell

Michael Rog & Andrew Welch

Craft CMS Critical Update: Info from P&T's Brad Bell