Author Topic: Mibew Messenger 3.0.0 has been released!  (Read 179 times)

0 Members and 1 Guest are viewing this topic.

faf

  • Mibew Staff Member
  • Native
  • *****
  • Posts: 748
    • Mibew Messenger
Mibew Messenger 3.0.0 has been released!
« on: November 30, 2017, 11:45:23 PM »
Good news, everyone! The new major release of Mibew Messenger is ready!

1. Why this release is major?

It's because the enumeration of Mibew Messenger versions follows convention of semantic versioning.

We switched from Handlebars.js 3 to Handlebars.js 4 as the client side templates engine. It costed us nothing, all templates of our default theme stayed unchanged and works just fine. However due to some backwards incompatibility issues there could be some troubles with a third party themes.

2. Why the aforementioned change has been done?

Because of known vulnerability in the old version of Handlebars.js.

3. Are there any other changes since Mibew Messenger 2.3.0 release?

Nothing special, just a couple of bug fixes.

4. Is this update necessary?

Because of its nature related to security the update is highly recommended.


Podn

  • Jr. Member
  • **
  • Posts: 2
Re: Mibew Messenger 3.0.0 has been released!
« Reply #1 on: December 12, 2017, 09:01:28 AM »
Hi,

"Because of known vulnerability in the old version of Handlebars.js." - This is due to the vulnerability of XSS?

faf

  • Mibew Staff Member
  • Native
  • *****
  • Posts: 748
    • Mibew Messenger
Re: Mibew Messenger 3.0.0 has been released!
« Reply #2 on: December 12, 2017, 02:15:21 PM »
"Because of known vulnerability in the old version of Handlebars.js." - This is due to the vulnerability of XSS?

Yes. I don't believe that it could seriously affect the existing installations of Mibew Messenger, however the security is never enough.

Podn

  • Jr. Member
  • **
  • Posts: 2
Re: Mibew Messenger 3.0.0 has been released!
« Reply #3 on: Yesterday at 03:39:06 AM »
Thank you!