Textpattern CMS

We have just set up a new Mastodon account. Please feel free to follow us there at @textpattern" target="_blank" rel="nofollow noopener">indieweb.social/@textpattern #mastodon #cms #opensource #indieweb

Textpattern 4.9.1 released: security fixes, patches and tweaks textpattern.com/weblog/textpat…

Textpattern CMS 4.9.0 is here!: textpattern.com/weblog/textpat…

Textpattern 4.9.0 beta.2 released textpattern.com/weblog/textpat…

We are pleased as punch to announce the release of Textpattern CMS 4.9.0 beta.1: textpattern.com/weblog/textpat…

Announcing our intentions for Textpattern 4.9.0 and beyond: Textpattern CMS 4.9.0 will support PHP 8.4 and MySQL 8.4 textpattern.com/weblog/textpat…

…*ahem*… Happy 20th birthday, us! 🎂 textpattern.com/weblog/textpat…

Over 1 million people have joined Mastodon since October 27. Between that and those who returned to their old accounts, the number of active users has risen to over 1.6 million today, which, for context, is over 3 times what it was just about two weeks ago!

@creatrixtiara @LiaSae Come back! 😀

🚨🚨 New research alert! 🚨🚨 @cornerpirate shows how he was able to leverage a XSS vulnerability within Textpattern CMS to obtain Remote Code Execution (RCE) on the backend server. Remember, if you are using Textpattern CMS v4.8.7, please update now. buff.ly/3tZsRu6

Team Textpattern gratefully appreciate the detailed report and research undertaken by @cornerpirate, the identification and resolution of this issue makes all Textpattern users safer. Thanks, Paul!

Textpattern 4.8.8 includes a fix for a security issue reported by @cornerpirate at @pentestltd. They have published an article with details. If you're running Textpattern 4.8.7 or earlier, we recommend updating to Textpattern 4.8.8 to resolve this. pentest.co.uk/labs/leveragin…

@textpattern @pentestltd If a security researcher finds this, you know that Textpattern dealt with this professionally and efficiently. They have a disclosure process. I recommend reading what is excluded from the scope because there is an important acceptance of risk they are doing you should know.

Kudos to @cornerpirate for his research (blog coming soon!) and also to @textpattern for their response to the reported issues 🙌

Textpattern 4.8.8 is ready. Thank you for your patience. There is a security fix included, thanks to a responsibly-disclosed report from @pentestltd. More on that to follow. textpattern.com/weblog/textpat… github.com/textpattern/te… 💛💛💛

If you are able to give 4.8.8 beta.1 some time, eyeballs and brain cycles, then report any problems to us, this will help us *massively* in making 4.8.8 as good as it can be. We hope to see you again in around two weeks with a full release announcement. Thank you. [2/2]

We released Textpattern 4.8.8 beta.1 on Jan 1st, 2022. It has support for PHP 8.1, optimisations and many small tweaks (improvements). We hope to release 4.8.8 in the next two weeks. We want to focus on Textpattern 4.9 and all the *new* and *extra* features it will bring. [1/2]

When we've addressed your feedback, we'll release the production-ready Textpattern 4.8.8. Please give it a test drive if you can.

Announcement with downloads: textpattern.com/weblog/textpat… GitHub release: github.com/textpattern/te… Dedicated forum thread: forum.textpattern.com/viewtopic.php?…

It's nearly 4 years since Dean died. He is still very missed. textpattern.com/weblog/memorie… #everythingisgoingtobealright