Security update release 3.1.12

SilverStripe version 3.1.12 stable has been released today, you can get a copy from our downloads section. All users of 3.1.11 or below are strongly advised to upgrade.

What's new in this version

This release includes a few security fixes to the framework. We planned to release this next week, but the cat got out of the bag and we decided it would be better to release the fixes as soon as possible. We apologise for the short notice. We've even told the cat off...

Details of security issue [ss-2014-015], [ss-2014-017], [ss-2015-009], and [ss-2015-010] can be found on our security releases page. Sites which use the rewrite hash-based link URLs may be affected.

Upgrading notes can be found here.

Upgrading

If you are using composer, upgrading is pretty simple. If you are linking to the 3.1.*-dev branch, you likely already have the update from the main branch, but if not a “composer update” will do the job.

If you are linked to a 3.1.* tag or development branch then update your composer.json as below.

"require": {
    "silverstripe/cms": "3.1.12",
    "silverstripe/framework": "3.1.12"
}

You can create a new web project to try out using our composer web installer

composer create-project silverstripe/installer ./mynewproject 3.1.12

Please note any issues you discover on our Github issue tracker for Framework, CMS, or the Installer.