Textpattern CMS

[Textpattern CMS @textpattern]

We have just set up a new Mastodon account. Please feel free to follow us there at https://t.co/b1aditt34A #mastodon #cms #opensource #indieweb

[Textpattern CMS @textpattern]

Textpattern 4.9.1 released: security fixes, patches and tweaks
https://t.co/MXSx14VaqP

[Textpattern CMS @textpattern]

Textpattern CMS 4.9.0 is here!: https://t.co/UHOI0Qxz3I

[Textpattern CMS @textpattern]

Textpattern 4.9.0 beta.2 released

https://t.co/WKJbhKGKio

[Textpattern CMS @textpattern]

We are pleased as punch to announce the release of Textpattern CMS 4.9.0 beta.1:

https://t.co/h5JhCABVs6

[Textpattern CMS @textpattern]

Announcing our intentions for Textpattern 4.9.0 and beyond:

Textpattern CMS 4.9.0 will support PHP 8.4 and MySQL 8.4

https://t.co/CCNcWNd9Lu

[Textpattern CMS @textpattern]

…*ahem*…

Happy 20th birthday, us! 🎂
https://t.co/ZniSeQmRwr

[Mastodon (@[email protected]) @joinmastodon]

Over 1 million people have joined Mastodon since October 27. Between that and those who returned to their old accounts, the number of active users has risen to over 1.6 million today, which, for context, is over 3 times what it was just about two weeks ago!

[Textpattern CMS @textpattern]

@creatrixtiara @LiaSae Come back! 😀

[Pentest @pentestltd]

🚨🚨 New research alert! 🚨🚨

@cornerpirate shows how he was able to leverage a XSS vulnerability within Textpattern CMS to obtain Remote Code Execution (RCE) on the backend server.

Remember, if you are using Textpattern CMS v4.8.7, please update now. https://t.co/X95H5fcPdf

[Textpattern CMS @textpattern]

Team Textpattern gratefully appreciate the detailed report and research undertaken by @cornerpirate, the identification and resolution of this issue makes all Textpattern users safer. Thanks, Paul!

[Textpattern CMS @textpattern]

Textpattern 4.8.8 includes a fix for a security issue reported by @cornerpirate at @pentestltd. They have published an article with details. If you're running Textpattern 4.8.7 or earlier, we recommend updating to Textpattern 4.8.8 to resolve this.
https://t.co/FLuH2PNz64

[ℙ𝕒𝕦𝕝 ℝ𝕚𝕥𝕔𝕙𝕚𝕖 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @cornerpirate]

@textpattern @pentestltd If a security researcher finds this, you know that Textpattern dealt with this professionally and efficiently. They have a disclosure process. I recommend reading what is excluded from the scope because there is an important acceptance of risk they are doing you should know.

[Pentest @pentestltd]

Kudos to @cornerpirate for his research (blog coming soon!) and also to @textpattern for their response to the reported issues 🙌

[Textpattern CMS @textpattern]

Textpattern 4.8.8 is ready. Thank you for your patience.
There is a security fix included, thanks to a responsibly-disclosed report from @pentestltd. More on that to follow.
https://t.co/If2NpIBwdg
https://t.co/hZmebEfQGC
💛💛💛

[Textpattern CMS @textpattern]

If you are able to give 4.8.8 beta.1 some time, eyeballs and brain cycles, then report any problems to us, this will help us *massively* in making 4.8.8 as good as it can be.
We hope to see you again in around two weeks with a full release announcement.
Thank you. [2/2]

[Textpattern CMS @textpattern]

We released Textpattern 4.8.8 beta.1 on Jan 1st, 2022. It has support for PHP 8.1, optimisations and many small tweaks (improvements).
We hope to release 4.8.8 in the next two weeks.
We want to focus on Textpattern 4.9 and all the *new* and *extra* features it will bring. [1/2]

[Textpattern CMS @textpattern]

When we've addressed your feedback, we'll release the production-ready Textpattern 4.8.8.

Please give it a test drive if you can.

[Textpattern CMS @textpattern]

Announcement with downloads: https://t.co/8sQiBLB29o
GitHub release: https://t.co/ttvjTakCbE
Dedicated forum thread: https://t.co/jdx6ehIiTY

[Textpattern CMS @textpattern]

It's nearly 4 years since Dean died. He is still very missed.
https://t.co/gJ7QE89GCO
#everythingisgoingtobealright