Movable Type 3.33/MT Enteprise 1.03 patches

Today we released a mandatory security update for Movable Type and Movable Type Enterprise to resolve a number of cross-site scripting vulnerabilities. To make updating your system easier, we are providing patch distributions for Movable Type versions 3.32 and Movable Type 3.2 containing only the files which have changed.

The patches are localized, so you will need to choose the one which is appropriate to your installation. If you are running a version of Movable Type other than v3.32 or v3.2, the full distribution provided in your Movable Type account is required for update.

Updating from Movable Type 3.32

Updating from Movable Type 3.2

More details forthcoming

Although we feel it's extremely important to provide you will full details about the vulnerabilities so that you understand the severity of the issues, we are postponing release of that information for a couple of days. This will allow you sufficient time to update your system (and inform your neighbors about updating theirs) before putting it at greater risk for attack.

If you have any questions, please feel free to contact us directly. We apologize for the inconvenience and thank you all for your continued support.