Why is there a bugfix release published shortly before a security vulnerability is closed?
When Contao 4.9.6 was released, we did not have this separation yet. There were problems with the update via the Contao Manager as well as bugs that had to be fixed the next day in a new version 4.9.7. Therefore, the core team decided not to mix security and bugfix versions anymore. Security releases will henceforth contain only the changes necessary to close the vulnerabilities.
Changelog of the fixed issues in Contao 5.4.2:
- #7503 Always break out of Turbo frames when missing ( fritzmg )
- #7500 Switch to a stable ALTCHA version ( leofeyer )
- #7499 Disable Turbo for the 2FA backup codes form ( leofeyer )
- #7493 Fix the loading time of the code editor ( leofeyer )
About Contao 5.4
The first stable version of Contao 5.4 has been released on 15 August 2024 and was the successor of Contao 5.3. 5.4 has been updated until 17 February 2025, after which it was replaced by Contao 5.5.
Add a comment