Answered: Is q2a 1.8.6 more secure than version 1.7.5?
Post date: 2022-05-16 20:43:47
Views: 480

Generally speaking: yes. It's practically always advisable to keep software up to date, because new versions fix known (potentially exploitable) bugs in older versions.

For more information you can review the version history. From a quick glance notable security improvements appear to be:

  • Security fix: prevent use of <embed> and <object> tags. (v1.8.4)
  • Reworked file cache to securely allow cache inside web root. (v1.8.0 beta 2)
  • Password security has been upgraded from sha1 to use PHP's password_hash function where available. (v1.8.0 beta 2)

You should also keep PHP, your webserver and your database updated, since those are part of the system's attack surface as well.
Please click Here to read the full story.
 
Other Top and Latest Questions:
Pentagon fires U.S. military newspaper leadership
Yields had a big week. Why these moves may be reminiscent of 1987
Big week coming up with PCE, Nvidia earnings and then Jackson Hole. Here's what to expect
U.S. military says it aided passage of 660 million barrels of oil through Strait of Hormuz since May
Most Americans aren't anti-vaccine. They're uncertain — and that's a growing public health challenge
Book: Purgatorio: Canto 30
Star Trek: Strange New Worlds: Level-Five Transporter Accident
Movie: Pictures of the Old World
Stargate SG-1: Sentinel Rewatch
Movie: Handsome Guys