Blog

So many releases?

June 18th, 2007 by Ted Kulp

Just wanted to make a quick comment about the number of releases in the last couple of weeks. We’ve basically had 2 major security releases in a matter of a week, and I’m sure that raises a red flag with some of the more established users.

I just want to emphasize something… this is a good thing. Sure it takes you several minutes to update your sites to the latest version and there isn’t an automated way of doing that yet. But as we gain users and gain popularity (very, very quickly I might add), more and more people are banging on the system and deconstructing it… finding these great obscure bugs that some hacker might’ve found first. And I make sure that we as a group jump on them as soon as I can. Instead of just sitting on them and waiting for a bunch to come in and bundle them up like Microsoft does, the group does all they can to get a new release out and get the word out quickly. This has become a philosphy for us and luckily all of the devs support it.

Annoying? Sure. Responsible? Definitely.

We’re trying out best to make a great, safe product with the little team that could. And sometimes this is the best we can do.

Thanks for you patience! Someday this gig will be fulltime for us and we can put a lot more time into making this the great app it should be.

18 Responses to “So many releases?”

  1. Russ Says:

    Who can argue with that? I couldn’t agree more Ted. People would certainly be much more upset if there web sites were compromised!

    Russ

  2. Signex Says:

    I dont mind, updating these small bugs is only a mather of seconds, like you said its better to be on top of security issues then to wait on the next planned big release!

    keep it up! dev. team

  3. Ben Says:

    I prefer fast updates and new releases.

    Everybody who is annoyed by updating her software just shouldnt. But then just dont complain that sth got hacked or misused. I know how difficult it is to check a software for security issues BEFORE it is released.

    So dont worry, I love updating ;)

  4. Cyberman Says:

    Many thanks for your work and your clarification!

    >> there isn’t an automated way of doing that yet.

    Think that would be a nice feature for coming releases. Saw last month a CMS which uses online updates for system (Nooo, I don’t wanna change :D)

    Please look here

    http://sourceforge.net/projects/typolight/

    (No, it’s NOT familar with Typo3)

    Maybe we can adapt this technologie …

  5. faglork Says:

    I am about to convert some static html sites to CMSMS. Given the rapid succession of “interim versions” when do you think that 1.1 will be out? AFAIK ist had been scheduled for end of May. If you release 1.1 in the near future I will probably wait. Any hints about the release of 1.1?

    Keep up the goog work!
    Alex

  6. Peter Gasston Says:

    It would be great if there were an automatic patch installer, but as long as there isn’t I’m happier to take the time to update my sites rather than leave them exposed.

  7. Andre G. Says:

    Please see my comment on the 1.0.8 release post, http://blog.cmsmadesimple.org/2007/06/18/cms-made-simple-108-released/#comment-726 , if you are experiencing problems regarding menu manager after updating your “simple”s .

  8. Cyberman Says:

    >> that raises a red flag with some of the more established users.

    Maybe we should add a red flag in admin panel too (means a online check for last version like SMF and Zencart for instance it does) so admins of all CMSms installs are informed - there is a newer, securer version.

  9. Andy Moore Says:

    Keep the fixed versions coming! I’d much rather have security fixes asap! Thanks for all your work on the project.

  10. Gregor Says:

    Better safe than sorry!

    Good job Ted (and all others)

  11. Andyb Says:

    Guys,

    Great Product,
    Great Support,
    Great Modules,
    Quick Fixes for Security Holes.

    Priceless.

  12. Peter Gasston Says:

    This is an URGENT problem: Since 1.07, anyone who is not an Admin can’t see the Published/Draft dropdown in News articles, so can’t publish stories. This has been mentioned elsewhere and filed as a bug.

  13. Thierry Says:

    Great product and I like it a lot.
    Don’t mind to update regularly. A least the community is active and it’s all that counts!

    Keep up the good work guys.

  14. Harold Says:

    I can confirm Peter’s bug.

    Quote:

    “anyone who is not an Admin can’t see the Published/Draft dropdown in News articles, so can’t publish stories”

  15. Ken Says:

    There is nothing wrong with these updates - they seem to be done in a timely fashion, however, as someone who doesn’t check cmsmadesimple.org on a daily basis, I wish there was a way to let me know via email that an update is released.

  16. Ricky Says:

    Just wanted to echo the other posters, great product! Thank you so much development team for this wonderful CMS. You release all of the updates you want! I’m thrilled when potential security holes are closed, heh heh :-)

    I agree though that _some_ way of notifying us in the admin panel of new versions might be helpful…

  17. Debon Says:

    Never apologize for doing a great job. Keep it coming Ted, although admittedly I have allowed myself to fall behind a bit. CHEERS!!!

  18. Jens Says:

    *ironic* we all collect donations and then after news big releases you have the money to let the script professionally hack from http://www.rent-a-hacker.com/ ;)) */ironic*

    I love CMSMS and I think it is okay to update more times than having an unsafe script.

    (sorry for my bad english …)

Leave a Reply