Answered: Is q2a 1.8.6 more secure than version 1.7.5?
Post date: 2022-05-16 20:43:47
Views: 567

Generally speaking: yes. It's practically always advisable to keep software up to date, because new versions fix known (potentially exploitable) bugs in older versions.

For more information you can review the version history. From a quick glance notable security improvements appear to be:

  • Security fix: prevent use of <embed> and <object> tags. (v1.8.4)
  • Reworked file cache to securely allow cache inside web root. (v1.8.0 beta 2)
  • Password security has been upgraded from sha1 to use PHP's password_hash function where available. (v1.8.0 beta 2)

You should also keep PHP, your webserver and your database updated, since those are part of the system's attack surface as well.
Please click Here to read the full story.
 
Other Top and Latest Questions:
Speaker Mike Johnson calls election-transfer concerns ‘absurd’
Anthropic's IPO could be 'speculative fiction' or a 'generational moment' — investors are split
How investors can position ahead of the Fed's next policy decision
Labubu-maker Pop Mart's shares extend declines as third-quarter sales plunge
Chart: Anthropic's cash pile towers over nearly every U.S. company
Art and other things in cans
To ID.me or not to ID.me?
mouse/keyboard config via webpage - security concerns?
Chevron and Exxon hit all-time highs as refining profits soar in reaction to Iran and Ukraine wars
Intel heads for worst day on Wall Street in more than 50 years on weak guidance