Contao news

Contao version 3.2.6 is available. The bugfix release fixes another security hole related to the PHP object injection vulnerability, which was still exploitable in the Contao back end in version 3.2.5.

Contao version 2.11.15 is available. The bugfix release fixes another security hole related to the PHP object injection vulnerability, which was still exploitable in the Contao back end in version 2.11.14.

Unfortunately, there is now an exploit for the potential PHP object injection vulnerability, which we have prophylactically fixed with the latest updates to Contao 3.2.5 and 2.11.14.

Contao version 3.2.5 is available. The bugfix release fixes a potential PHP object injection vulnerability (thanks to Pedro Ribeiro).

Contao version 2.11.14 is available. The bugfix release fixes a potential PHP object injection vulnerability (thanks to Pedro Riberio).

Contao version 3.2.4 is available. The bugfix release fixes an issue with resolving module dependencies and a problem with assigning articles to layout sections.

Contao version 3.2.3 is available. The bugfix release fixes an issue with displaying repeated events and with creating a website in a language which is not installed.

Contao version 3.2.2 is available. The bugfix release fixes the issue with adding new resources to the database-assisted file system and with nesting insert tags using the new "iflng" shorthand syntax.

Contao version 3.2.1 is available. The bugfix release improves the routines to convert UUID fields in the database updater and contains a TinyMCE update which is compatible with IE11.

Contao version 3.2.0 is available. 140 tickets and pull requests have been completed during the 4 months of development and the following 2 months of testing.