As Jun Kaneko from Six Apart KK pointed out recently, his crew is working on auditing the core of this excellent publishing platform and would continue to come up with improvements and security fixes.
On June the 22nd Six Apart KK announced movable type v5.12, v5.06 and v4.37 as mandatory security updates mentioning that these updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x and that all users must upgrade to this latest release immediately.
The impact of the vulnerabilities is described as:
Go ahead and upgrade your installation right away or hire me to upgrade it on your behalf.
On June the 22nd Six Apart KK announced movable type v5.12, v5.06 and v4.37 as mandatory security updates mentioning that these updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x and that all users must upgrade to this latest release immediately.
The impact of the vulnerabilities is described as:
Under certain circumstances, a user who has "Create Entries" or "Manage Blog" pemissions may be able to read known files on the local file system.
Go ahead and upgrade your installation right away or hire me to upgrade it on your behalf.
