We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 27708 MODX Staff
    • 2,502 Posts
    MODX Evolution 1.0.15 is now available. This release of MODX Evolution includes more than 100 fixes and improvements. It also includes fixes for two critical security vulnerabilities; one in the core and one in Jot, a commenting Extra that is packaged with Evolution. As this release contains critical security fixes, this should be considered a mandatory upgrade.

    Highlights of the 1.0.15 release include:

    • Various security fixes including Jot fix and cookie handling
    • Added MySQLi extender for PHP 5.5. support
    • Updates to Wayfinder and eForm
    • Many Language Translation Updates
    • Read the complete changelog

    Thanks to the Contributors
    We'd like to thank the contributors for this release who are: Jako (Thomas Jakobi), yama (Masanori Yamamoto), Dmi3yy (Dmytro Lukianenko), Segr Kaparov (Segr), tonatos, bossloper, mrhaw (Andreas Wettainen), TimGS (Tim Spencer), Pathologic, olegpro (Олег Максименко), Haprog (Kari Söderholm), jasonabird (Jason Bird), OptimusCrime, and juliolopez78 (Julio López)

    With regard to the critical security issues, there are two possible options to mitigate them:

    1. Upgrade to MODX Evolution 1.0.15 (recommended)
    2. If using Evo 1.0.11 and higher, replace the two files affected. See details.

    Get Started with Evo 1.0.15
    Here's what you need to get started or upgrade to MODX Evolution 1.0.15:

    It Takes a Village
    To everyone who filed bugs and made feature requests. Thanks and keep them coming!

    Keep Your MODX Sites Safe
    To keep your MODX sites safe and performing their best, we strongly recommend upgrading to the latest version of Evolution. If you need someone to assist you with your MODX Evolution upgrade, check out our MODX Professionals directory for a MODX professional near you or contact us.


    On behalf of the MODX and Evolution teams,
    Thank-you. [ed. note: smashingred last edited this post 11 years, 11 months ago.]
      Author of zero books. Formerly of many strange things. Pairs well with meats. Conversations are magical experiences. He's dangerous around code but a markup magician. Blog ✦ Twitter ✦ LinkedIn ✦ GitHub
      • 9995
      • 1,613 Posts
      We should remove default packages (like Jot) and be able to install them with PackageManager.

      Just updated my 1.0.14 version and no bugs found (on first glimp).
        Evolution user, I like the back-end speed and simplicity smiley
        • 13226
        • 953 Posts
        Just updated the "cache_sync.class.processor.php" in a 1.0.8 site and it broke.

        The file is obviously not compatible as it is with previous versions.

        The following error occured while attempting to parse the requested resource:
        « Execution of a query to the database failed - Unknown column 'alias_visible' in 'field list' »
        SQL: SELECT id, IF(alias='', id, alias) AS alias, parent, alias_visible FROM `DBNAME`.`PREFIX_site_content`
          • 9995
          • 1,613 Posts
          Hmm indeed, I had the same message (when clearing cache) on an old 1.0.10 version. [ed. note: fourroses666 last edited this post 11 years, 11 months ago.]
            Evolution user, I like the back-end speed and simplicity smiley
            • 27708 MODX Staff
            • 2,502 Posts
            I should have noted in the instructions that this would be for anyone running the 1.0.14 to patch/replace. We cannot guarantee it would work with previous versions. There have been so many major vulnerabilities patched in the last year, not being on the current version is a major risk.
              Author of zero books. Formerly of many strange things. Pairs well with meats. Conversations are magical experiences. He's dangerous around code but a markup magician. Blog ✦ Twitter ✦ LinkedIn ✦ GitHub

            This discussion is closed to further replies. Keep calm and carry on.