Go offline with the Player FM app!
Modernize or Die® - CFML News Podcast for March 7th, 2023 - Episode 187
Manage episode 357820392 series 2508132
2023-03-07 Weekly News - Episode 187
Watch the video version on YouTube at https://youtube.com/live/6BZn9dCSHEs?feature=share
Hosts:
- Gavin Pickin - Senior Developer at Ortus Solutions
- Grant Copley - Senior Developer at Ortus Solutions
Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there.
A few ways to say thanks back to Ortus Solutions:
- Like and subscribe to our videos on YouTube.
- Help ORTUS reach for the Stars - Star and Fork our Repos
- Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github
- Subscribe to our Podcast on your Podcast Apps and leave us a review
- Sign up for a free or paid account on CFCasts, which is releasing new content every week
- BOXLife store: https://www.ortussolutions.com/about-us/shop
- Buy Ortus’s Books
- 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
- Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes
Patreon Support ( BOXTACTULAR ) - UPDATED GOALS
We have 40 patreons:
Goal 1 - 25% - This goal would help us to fully fund the hosting of ForgeBox.io (www.forgebox.io), the ColdFusion software directory.
Goal 2 - 12% - This goal would fund the development of CommandBox CLI, so it can remain FREE and Open Source forever.
Goal 3 - 6% - This goal would help us to fully fund the Modernize or Die podcasts.
https://www.patreon.com/ortussolutions.
News and Announcements
Authentication Bypass Vulnerability in Mura CMS and Masa CMS (CVE-2022-47003 and CVE-2022-47002)
Mura CMS is a popular content management system written in ColdFusion/CFML. While it was originally a commercial open source product, it was re-licensed as a closed source application with the release of Mura CMS v10 in 2020. There are forked open source projects based on the last open source release of Mura CMS, including Masa CMS - which is actively maintained.
Multiple versions of Mura CMS and Masa CMS contain an authentication bypass vulnerability that can allow an unauthenticated attacker to login as any Site Member or System User.
https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html
ICYMI - State of the CF Union 2023 Released
Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc.
https://teratech.com/state-of-the-cf-union-2023-survey
New Releases and Updates
CommandBox 5.8.0 Released!
We are pleased to announce the release of CommandBox 5.8.0, which comes with a handful of new features and some important library updates.
Now bundles commandbox-cfconfig, commandbox-dotenv, commandbox-update-check. Automatically installed or updated when you start CLI
Automcally sets the content type in the HTTP response for static file typesl. You can customize in server.json
Config and Module Sync - if you are authenticated to ForgeBox in the CLI, you can synchronize config settings to and from.
Web Server Case Sensitivty - forcing case sensitivity on Windows
REPL improvements
As usual, you can acquire the latest release from our download page or your favorite HomeBrew or apt/yum repo
https://www.ortussolutions.com/products/commandbox#download
https://www.ortussolutions.com/blog/commandbox-580-released
https://commandbox.ortusbooks.com/
ICYMI - First Lucee 6 Beta Released
Remember this is a BETA, so it’s not production ready, what we are looking for in this first BETA release, is for you to try and run your apps / test suites in locally and let us know how it goes for you.
https://dev.lucee.org/t/first-lucee-6-public-beta-is-available-6-0-0-346-beta/12195
Webinar / Meetups and Workshops
Ortus Event Calendar for Google
https://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20
Ortus Webinar - March 17, 2023 - will confirm speaker and topic
Friday, March 17th, at 11am CST.
CFCasts Content Updates
https://www.cfcasts.com
Recent Releases
- Mastering CommandBox 5 - 1 new videos - https://cfcasts.com/series/mastering-commandbox-5
- Inline Tab Complete - https://cfcasts.com/series/mastering-commandbox-5/videos/inline-tab-complete
- 2023 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2023-forgebox-modules-of-the-week
- 2023 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2023-vs-code-hint-tip-and-trick-of-the-week
Coming Soon
- Brad with more CommandBox Videos
- More ForgeBox and VS Code Podcast snippet videos
- CBWire Series from Grant - Fill out the Poll here https://community.ortussolutions.com/t/poll-cbwire-cfcasts-com-series/9513
- ColdBox Elixir from Eric
- Getting Started with ContentBox from Daniel Garcia
Conferences and Training
Github Galaxy
March 28th, 2023
Save the date for our global enterprise event focused on improving efficiency, security, and developer productivity.
GitHub Galaxy—formerly known as GitHub InFocus—is new and reimagined.
Virtual registration is right around the corner.
VIP summits: Join us in-person for a VIP summit near you, with breakout sessions, networking, and more for enterprise leaders.
https://galaxy.github.com/
Dev Nexus
April 4-6th, 2023 in Atlanta
Georgia World Congress Center
285 Andrew Young International Blvd NW
Atlanta, GA 30313
Kubernetes, Java, Software architecture, Kotlin, Performance Tuning
https://devnexus....
217 episodes
Manage episode 357820392 series 2508132
2023-03-07 Weekly News - Episode 187
Watch the video version on YouTube at https://youtube.com/live/6BZn9dCSHEs?feature=share
Hosts:
- Gavin Pickin - Senior Developer at Ortus Solutions
- Grant Copley - Senior Developer at Ortus Solutions
Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there.
A few ways to say thanks back to Ortus Solutions:
- Like and subscribe to our videos on YouTube.
- Help ORTUS reach for the Stars - Star and Fork our Repos
- Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github
- Subscribe to our Podcast on your Podcast Apps and leave us a review
- Sign up for a free or paid account on CFCasts, which is releasing new content every week
- BOXLife store: https://www.ortussolutions.com/about-us/shop
- Buy Ortus’s Books
- 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
- Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes
Patreon Support ( BOXTACTULAR ) - UPDATED GOALS
We have 40 patreons:
Goal 1 - 25% - This goal would help us to fully fund the hosting of ForgeBox.io (www.forgebox.io), the ColdFusion software directory.
Goal 2 - 12% - This goal would fund the development of CommandBox CLI, so it can remain FREE and Open Source forever.
Goal 3 - 6% - This goal would help us to fully fund the Modernize or Die podcasts.
https://www.patreon.com/ortussolutions.
News and Announcements
Authentication Bypass Vulnerability in Mura CMS and Masa CMS (CVE-2022-47003 and CVE-2022-47002)
Mura CMS is a popular content management system written in ColdFusion/CFML. While it was originally a commercial open source product, it was re-licensed as a closed source application with the release of Mura CMS v10 in 2020. There are forked open source projects based on the last open source release of Mura CMS, including Masa CMS - which is actively maintained.
Multiple versions of Mura CMS and Masa CMS contain an authentication bypass vulnerability that can allow an unauthenticated attacker to login as any Site Member or System User.
https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html
ICYMI - State of the CF Union 2023 Released
Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc.
https://teratech.com/state-of-the-cf-union-2023-survey
New Releases and Updates
CommandBox 5.8.0 Released!
We are pleased to announce the release of CommandBox 5.8.0, which comes with a handful of new features and some important library updates.
Now bundles commandbox-cfconfig, commandbox-dotenv, commandbox-update-check. Automatically installed or updated when you start CLI
Automcally sets the content type in the HTTP response for static file typesl. You can customize in server.json
Config and Module Sync - if you are authenticated to ForgeBox in the CLI, you can synchronize config settings to and from.
Web Server Case Sensitivty - forcing case sensitivity on Windows
REPL improvements
As usual, you can acquire the latest release from our download page or your favorite HomeBrew or apt/yum repo
https://www.ortussolutions.com/products/commandbox#download
https://www.ortussolutions.com/blog/commandbox-580-released
https://commandbox.ortusbooks.com/
ICYMI - First Lucee 6 Beta Released
Remember this is a BETA, so it’s not production ready, what we are looking for in this first BETA release, is for you to try and run your apps / test suites in locally and let us know how it goes for you.
https://dev.lucee.org/t/first-lucee-6-public-beta-is-available-6-0-0-346-beta/12195
Webinar / Meetups and Workshops
Ortus Event Calendar for Google
https://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20
Ortus Webinar - March 17, 2023 - will confirm speaker and topic
Friday, March 17th, at 11am CST.
CFCasts Content Updates
https://www.cfcasts.com
Recent Releases
- Mastering CommandBox 5 - 1 new videos - https://cfcasts.com/series/mastering-commandbox-5
- Inline Tab Complete - https://cfcasts.com/series/mastering-commandbox-5/videos/inline-tab-complete
- 2023 ForgeBox Module of the Week Series - 1 new Video https://cfcasts.com/series/2023-forgebox-modules-of-the-week
- 2023 VS Code Hint tip and Trick of the Week Series - 1 new Video https://cfcasts.com/series/2023-vs-code-hint-tip-and-trick-of-the-week
Coming Soon
- Brad with more CommandBox Videos
- More ForgeBox and VS Code Podcast snippet videos
- CBWire Series from Grant - Fill out the Poll here https://community.ortussolutions.com/t/poll-cbwire-cfcasts-com-series/9513
- ColdBox Elixir from Eric
- Getting Started with ContentBox from Daniel Garcia
Conferences and Training
Github Galaxy
March 28th, 2023
Save the date for our global enterprise event focused on improving efficiency, security, and developer productivity.
GitHub Galaxy—formerly known as GitHub InFocus—is new and reimagined.
Virtual registration is right around the corner.
VIP summits: Join us in-person for a VIP summit near you, with breakout sessions, networking, and more for enterprise leaders.
https://galaxy.github.com/
Dev Nexus
April 4-6th, 2023 in Atlanta
Georgia World Congress Center
285 Andrew Young International Blvd NW
Atlanta, GA 30313
Kubernetes, Java, Software architecture, Kotlin, Performance Tuning
https://devnexus....
217 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.