Blesta 4.10.1 has been released, which addresses two bugs discovered in the 4.10.0 branch, including one security issue affecting the Order Manager with an impact rating of Moderate. More information about how we rate vulnerabilities can be found on our Security Advisories page. A big thanks to everyone who participated in helping to make Blesta better by reporting and confirming bugs on our forums and discord chat, we appreciate your help!

The release notes are available at https://docs.blesta.com/display/support/4.10.1.

Always run /admin/upgrade in your browser after patching or upgrading your installation. Patch releases may only be applied to the minor release to which it belongs. Only apply the patch if you are running 4.10.0. If you are running an earlier version, you must download the full release.

Download 4.10.1 Patch Download 4.10.1 Full

SHA256 Sum

% blesta-4.10.1.zip
9065d52c3d916efe73474687d116fc2ec7673160e8f288fa6b53568a6e0267fa

% blesta-4.10.0-4.10.1.zip
b64ccf68814951441c4d716d1648687376bee29d0650774f1f14d3bb22c258db

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

Affected Versions

All versions of the Order Manager plugin are affected.

Description

This update addresses one security concern:

1. An XSS flaw that affects the order system under certain circumstances.

Resolution

If running 4.10.0, apply the patch for 4.10.1. If running a version earlier than 4.10.0, upgrade to the full 4.10.1 release. See below for mitigation for older supported releases.

Mitigation

It is best to upgrade to 4.10.1, however, if you are running a supported version of Blesta (version 4.6, 4.7, 4.8, or 4.9) you may overwrite the following files from the 4.10.1 patch:

• /blesta/plugins/order/views/templates/ajax/config.pdt
• /blesta/plugins/order/views/templates/standard/config.pdt
• /blesta/plugins/order/views/templates/wizard/config.pdt

Credits

This item was reported by Abdellah nadi in accordance with our Responsible Disclosure Policy.

We are pleased to announce the released of Blesta 4.9.1, which addresses bugs discovered in the 4.9.0 branch. A big thanks to everyone who participated in helping to make Blesta better by reporting and confirming bugs on our forums and discord chat, we appreciate your help!

The release notes are available at https://docs.blesta.com/display/support/4.9.1.

Always run /admin/upgrade in your browser after patching or upgrading your installation. Patch releases may only be applied to the minor release to which it belongs. Only apply the patch if you are running 4.9.0. If you are running an earlier version, you must download the full release.

Download 4.9.1 Patch Download 4.9.1 Full

SHA256 Sum

% blesta-4.9.1.zip
50b7734fb782cb5d9cbe6cb5e1f627322ad8bee43690c4ebed4942b8c8319a07

% blesta-4.9.0-4.9.1.zip
3fd55f932297f002575c9c49bfe408ec586709c29be0d7680b0cb1c139054f18

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

We are pleased to announce the released of Blesta 4.8.1, which addresses bugs discovered in the 4.8.0 branch. A big thanks to everyone who participated in helping to make Blesta better by reporting and confirming bugs on our forums and discord chat, we appreciate your help!

The release notes are available at https://docs.blesta.com/display/support/4.8.1.

Always run /admin/upgrade in your browser after patching or upgrading your installation. Patch releases may only be applied to the minor release to which it belongs. Only apply the patch if you are running 4.8.0. If you are running an earlier version, you must download the full release.

Download 4.8.1 Patch Download 4.8.1 Full

SHA256 Sum

% blesta-4.8.1.zip
69d8585fb340d86f5aa74379f25d85c91b10407be8d9aa110a8a46421195c230

% blesta-4.8.0-4.8.1.zip
cec139966564e8590e9349d12f95a577d9b0cd45f6bc10a6d7fb04d06af2df76

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

We are pleased to announce the released of Blesta 4.7.2, which addresses bugs discovered in the 4.7.0 branch. A big thanks to everyone who participated in helping to make Blesta better by reporting and confirming bugs on our forums and discord chat, we appreciate your help!

The release notes are available at https://docs.blesta.com/display/support/4.7.2.

Always run /admin/upgrade in your browser after patching or upgrading your installation. Patch releases may only be applied to the minor release to which it belongs. Only apply the patch if you are running 4.7.0 or 4.7.1. If you are running an earlier version, you must download the full release.

Download 4.7.2 Patch Download 4.7.2 Full

SHA256 Sum

% blesta-4.7.2.zip
5f80af9cf08f3b55fd2a2ac5083fc09bfc1b865473f665faaf0214f480146276

% blesta-4.7.0-4.7.2.zip
8f3cc1059abab63929101ac3208e6fd6b9d3a1db186c305f958d96191155b5dd

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.

We are pleased to announce the released of Blesta 4.7.1, which addresses bugs discovered in the 4.7.0 branch. A big thanks to everyone who participated in helping to make Blesta better by reporting and confirming bugs on our forums and discord chat, we appreciate your help!

The release notes are available at https://docs.blesta.com/display/support/4.7.1.

Always run /admin/upgrade in your browser after patching or upgrading your installation. Patch releases may only be applied to the minor release to which it belongs. Only apply the patch if you are running 4.7.0. If you are running an earlier version, you must download the full release.

Download 4.7.1 Patch Download 4.7.1 Full

SHA256 Sum

% blesta-4.7.1.zip
8ac47e7a801146a71ef175e4cbd32797227fcd3bee9c716463cf271c1522cc11

% blesta-4.7.0-4.7.1.zip
f06ba0b851a5ededc5d7e08a1285cb03963eafef32fb85a931923c392535418d

To patch your installation, please follow the instructions for Patching an Existing Install from our user manual.