Composite C1 v6.7 Release Notes

Release Date: 2019-10-30 // over 4 years ago
  • C1 CMS 6.7 (6.7.7240.24791)

    Download

    ๐Ÿš€ Download C1 CMS 6.7

    Whatโ€™s new in C1 CMS 6.7?

    ๐Ÿš‘ This release is mostly focused on stabilization and fixes, including a critical security fix.

    ๐Ÿ‘‰ User Groups can now be assigned access to a given language, this was previously a โ€œUser onlyโ€ setting. For federated authentication systems, where users are managed in AAD, this feature allow better control over language access.

    When searching for media in the C1 Console, tags on media are available as facets for result filtering.

    ๐Ÿš‘ Critical security fix

    ๐Ÿš‘ Critical security fix for a Remote Code Execution vulnerability, where a C1 Console user (with any access level) can complete a remote code execution attack on the website. This vulnerability cannot be exploited by anonymous users, but we urge all our users to upgrade to this release at the earliest convenient time. MITRE reference: CVE-2019-18211.

    โฌ†๏ธ Free automated upgrade

    ๐Ÿš€ To best protect you, Orckestra is providing free, immediate and direct access to our automated upgrade feature โ€“ any C1 installation from 2011 and later can now be upgraded to this release, free of charge.

    ๐Ÿš€ Details on the exploit should be expected to be published within one month. We suggest you upgrade to this release before January 2020.

    โฌ†๏ธ For guidance on upgrade, please see issue #696

    ๐Ÿ”’ A big thanks to Florian Hauser, security analyst at @codewhitesec https://twitter.com/codewhitesec, for taking the time to analyze, document and report the vulnerability in a thorough and responsible way.

    ๐Ÿ›  Minor changes and bug fixes

    • ๐Ÿ›  Fixing issue with Chrome v74 and later, breaking the calendar UI in the C1 Console.
    • โš  In the C1 Console, a โ€œanother user is editing thisโ€ warning was erroneously shown when another user was editing other language versions of the page.
    • ๐Ÿ›  Fixing issue with resolving data/page relations, which fx could lead to blog posts from one subsite to appear in search results on another subsite
    • ๐Ÿ›  Fixing issue preventing you from running C1 in a virtual folder
    • Page rendering, fixing issue where duplicate meta tags would surface the first encountered (in a depth first search) rather than the last. This fix ensure you can overwrite a โ€˜commonโ€™ meta tag in the template fx, from an embedded C1 Function.

    ๐Ÿš€ For a list of all issues fixed in this release, see issues closed in C1 CMS 6.7

    6 7