With Monday being a public holiday, 3.6.1 stable and 3.4.7 stable will be released on Tuesday next week.
When entering the password for a user account incorrectly 3 times, a message was displayed to the user letting them know that the account has been locked. If someone was looking for a valid user account, this message would indicate to them that the account was valid. This was a potential security issue that could have caused an user enumeration issue. When an account is locked, the user no longer receives this message. Instead, the standard "User Not Found" message is displayed. The fact that the account was locked is still recorded in the system log file.
Previously, write access was required to change the group restrictions for a user. This has now been changed to require administrator as it is an administrative task that normal content editors should not be able to perform. This change has been made to both 3.6.x and 3.7.x and will be in the 3.6.1 release next month.
A new stable version of MySource Matrix was released on Monday. Version 3.6.0 is available from the web site and is the first stable release to include support for the Oracle database.
The new stable version of MySource Matrix will be released on Monday. Version 3.6.0 will include a range of great new features to allow for more advanced web sites to be created.