[Movable Type Alert] Movable Type Bug Fix/Patch Required

[gtc]

Movable Type 3.15 released
01.24.2005

Version 3.15 fixes a vulnerability in the mail sending packages for all Movable Type versions which allows malicious users to send email through the application to any number of arbitrary users.

All users should install this update.

The update is here:
http://www.movabletype.org/news/2005/01/movable_type_315_release.shtml

A thread on Jay Allen's site:
http://www.jayallen.org/comment_spam/forums/index.php?showtopic=461

[Deb]

Thanks for bringing this back up ..... It's yet another item we were deferred on in trying to alert about.....

[Deb]

P.S. You're also the first non-FutureQuest employee to ever be a thread starter in this forum :bow:

[gtc]

P.S. You're also the first non-FutureQuest employee to ever be a thread starter in this forum

Cool -- do I get a merit badge or something!!

[Course as I go to apply the patch I accidentally untar the full version, which nukes all my customized files. Sigh. **** these spammers!]

[Evoir]

It's a pretty easy update. I like that they gave a patch that you can simply drop in your plugins directory. :)

[DogAndPony]

P.S. You're also the first non-FutureQuest employee to ever be a thread starter in this forum :bow:I was wondering about that... Did he hack the forum? :EG:

...Bob

Bob West

[gtc]

I was wondering about that... Did he hack the forum? :EG:


I could tell you, but... (Actually it was moved :) )

More coverage:
http://www.adammessinger.com/2005/01/24/mt-spam-zombie

[gtc]

This might also be a good place to mention the rel="nofollow" plugin.

Movable Type 'nofollow' plugin
01.18.2005

Today we are pleased to announce our full support for the rel="nofollow" attribute to hyperlinks introduced to address the main cause of weblog spam: the payoff of higher placement in search engine results.

This initiative, with announced support from Google, Yahoo, MSN (and surely more to come), will direct search engines to ignore links with this attribute set for the purposes of spidering or increasing search engine relevance or ranking.

http://www.movabletype.org/news/2005/01/movable_type_nofollow_p.shtml
http://www.sixapart.com/pronet/2005/01/introduction_to.html