I have just returned from a few weeks away to a barrage of emails detailing four new Pixie vulnerabilities. The good news is that none of them are severe but it is worth being away of these problems. The details are here:
These security issues are present in all versions of Pixie including the current stable and beta. Please post your patches and fixes to the forum.
Today we are releasing Pixie v1.04. As mentioned earlier in the week there have been plenty of improvements made in this version. See the change log for a detailed list. This version of Pixie has been primarily tested on PHP5 platforms so those of you who run PHP4 on your servers may wish to upgrade Pixie with caution - remember to backup your site and database.
Upgrade instructions can be found in the Wiki. As so much has changed we have also released an advisory page to aid you with the procedure.
This release would not have been possible without the help of Tony, Sam and Isa - over the last few months their attention to the project has been hugely appreciated. If you would like to show your support please consider a donation to the team to buy a few beers.
As always we look forward to seeing the sites you create with Pixie and if you have any problems please post them to the Pixie forums. We will be posting back here soon with some plans for the future of Pixie, there has been some talk about a complete rewrite for Pixie 2.0 - more soon!
The next release of Pixie is now ready for download, it contains a patch for the security flaw found last week. Upgrade instructions can be found in the wiki, unfortunately they are a little bloated. If you get stuck or find bugs in this release - please post your questions and feedback to the forums.
Continue reading Pixie v1.02...
We received an email today detailing a number of security vulnerabilities in Pixie. We have now issued a patch for these bugs which can be downloaded here. It is advised that all users of version 1.0 and 1.01 apply these patches. If you have any questions about this update please post them to the Pixie forums.
We will release Pixie 1.02 for download over the weekend and it will contain these patches.