This is an out-of-band update for the version 1.xx series of releases. Please note that version 1.xx will only receive security updates and no other updates, through May 2017.
This release addresses a critical security update, per Security Bulletin 20160912.
As always, please test your upgrades on a development version of your site first. Be sure to back-up prior to upgrade, and merge any noted viewset changes as desired. We're not responsible for any Hotcakes that get spilled on the floor.
Downloads & Installation/Upgrade Packages
This update only applies to customers that haven't yet upgraded to version 2.0. If you have a valid 1.xx license, you may apply this update free of charge.
You can get your upgrade package at any time by submitting a support request using the link above.
Hotcakes Partners will find these downloads already available in the partner portal.
All of our other related downloads are always available on our download page.
- 33658 - SI: An unauthorized user could potentially access the dashboard and setup wizard.
This release doesn't have any viewset changes, but you should always perform a comparison of your viewset to the default viewset anyway to ensure that you have any desired updates from prior releases.
Support, Questions, Concerns
If you have any questions, please feel free to leave a comment below or create a support request using the link above. Please know that we can't publicly comment in any way further about the security bulletin.
In addition the terms and conditions outlined in our EULA/SLA:
The information provided in the Hotcakes Commerce, LLC (HOTCAKES) knowledge base is provided “as is” without warranty of any kind. HOTCAKES disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall HOTCAKES or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if HOTCAKES or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.