601am is excited to be attending the first Movable Type Idea Exchange, October 18th, 2012 in New York City, at OFFSITE, where our own Aaron Bailey will be speaking on our involvement with Washingtonian Magazine. In addition, representatives from Six Apart will be in attendance to discuss MT 5.2, the hosted version of MT, coming investments in North America, and what to expect next from Movable Type.
If you're a client or interested in Movable Type, please attend! For more information or to RSVP, please email Robert Minton -- VP of Sales & Marketing, Six Apart -- at rminton@sixapart.com.
If you're unable to attend on October 18, Aaron will be in New York from October 17 through October 20 and is interested in meeting our clients. Please contact me (mike@601am.com) to schedule a time.
We're beyond excited to attend and speak at CMS Expo, May 8-10, in Chicago for a few reasons. First, Chicago in May is absolutely beautiful. Having moved away from Chicago four years ago, it's this time of year that I miss the most.
Second, I get to present two sessions:
Movable Type Flyover: "What is Movable Type? Why should you use it? What makes MT different than other CMS on the market? Aaron Bailey, principal of 601am, a long-time Movable Type professional services and support provider, will walk you through Movable Type 5, a CMS that started as a simple blogging engine but has grown over the past decade to power full websites. This will be a high-level flyover designed to give technical and non-technical attendees an overview of Movable Type and what it can do for your organization."
Movable Type Site Showcase: "Movable Type 5 is an all-in-one social publishing platform flexible enough to power large media publications and blog networks as well as small business websites. In this session, you will see examples of MT sites in each of the following categories, learn how they were built, and walk through the CMS from the perspective of a content editor, designer and administrator."
Planning on attending and interested in a one-on-one chat about your CMS needs? Please shoot me an email (aaron@601am.com) and let's schedule some time for tea or coffee.
Haven't registered yet? Use discount code MT2012 for $100 off registration.
Six Apart has released a mandatory upgrade for all users of Movable Type:
Movable Type 5.13, 5.07, and 4.38 were released as mandatory security updates. These updates resolve multiple vulnerabilities discovered in Movable Type 5.x and Movable Type 4.x. All users must upgrade to this latest release immediately.
The impact of the vulnerabilities
The previous versions of Movable Type have multiple vulnerabilities including cross-site scripting (XSS), cross-site request forgery (CSRF/XSRF), and OS Command Injection. A remote attacker could execute arbitrary code in a logged-in users' web browser. A remote attacker could read or modify the contents in the system, and could execute a shell command under certain circumstances.
Versions Affected
Movable Type Open Source 4.x
Movable Type Open Source 5.x
Movable Type 4.x ( with Professional Pack, Community Pack )
Movable Type 5.x ( with Professional Pack, Community Pack )
Movable Type Enterprise 4.x
Solution
Please upgrade to the latest versions of Movable Type 4 or Movable Type 5.
Movable Type Open Source 4.38
Movable Type Open Source 5.07
Movable Type Open Source 5.13
Movable Type 4.38( with Professional Pack, Community Pack)
Movable Type 5.07( with Professional Pack, Community Pack)
Movable Type 5.13( with Professional Pack, Community Pack)
Movable Type Enterprise 4.38
Movable Type Advanced 5.13
Movable Type 5.13 introduces new security features.
Account and IP lockout
Configurable password validation rule
Stronger password encryption
To Upgrade
Current customers can submit a ticket. Your upgrade will be scheduled according to your SLA. New customers should contact 601am for more information.
Last evening, Six Apart released mandatory security updates, which resolve multiple vulnerabilities discovered in MT 4 and 5.
If you would like 601am's help in upgrading your installations, please get in touch.
