The official profile for Umbraco - The Friendly OpenSource ASP.NET CMS. Managed by Umbraco HQ.
Umbraco versions 13.0.0 to 13.12.0 are vulnerable due to an issue with .udt file uploads, allowing potential file system enumeration and NLTM hash retrieval. A patch is available for Umbraco 13.12.1, and Umbraco Cloud sites are automatically updated. Thanks to Tomasz Holeksa for reporting the vulnerability.
Umbraco 17, the latest Long-Term Supported version, is built on .NET 10 LTS, enhancing performance, security, and scalability. Key features include load balancing for the backoffice, consistent UTC date handling, and improved accessibility. This release marks a significant milestone for digital agencies and developers, offering a stable foundation for future growth.
Umbraco HQ introduces Umbraco 17, a major Long-Term Support release built on .NET 10, featuring enhanced performance and scalability. Key updates include consistent date handling, load balancing for the Backoffice, UI improvements, and changes to Models Builder. Upgrade considerations from previous versions are also discussed.
The US Partners Summit, hosted by Umbraco HQ, emphasizes community engagement, learning, and collaboration among agencies. Attendees are encouraged to network, share insights, and discuss industry changes, highlighting the importance of tools like Bronco Compose. The event fosters relationships that can drive business growth within the Umbraco community.
Andy Butland discusses the release candidate of Umbraco 17, highlighting key updates and improvements, including .NET 10 compatibility, load balancing for the backoffice, consistent date handling, and enhanced user experience features. He encourages users to test the release candidate and report any issues for further refinement.
Umbraco 17 has launched its Beta version, introducing a clearer pre-release process. This update features a new backoffice architecture, improved extensibility, and modern technology, transitioning from AngularJS to Web Components. The upgrade from Umbraco 13 to 17 is significant but manageable, ensuring a stable, future-proof platform for developers and users.
Umbraco 14 has removed the backoffice tours feature that was present in Umbraco 13, which introduced users to CMS functionalities. Although there were intentions to re-implement this feature in future versions, AndyButland states that efforts will focus on enhancing documentation and video resources instead, as custom tours were not widely adopted.
Andy Butland announces that Razor run-time compilation is now obsolete, urging against its use in production. This change affects Umbraco features like the BackOfficeDevelopment runtime mode and InMemoryAuto models builder, which will be removed in Umbraco 19. Users are advised to edit templates as .cshtml views and utilize dotnet watch for hot reload.
Andy Butland reports that moderate and low security vulnerabilities in Smidge, an upstream dependency for Umbraco 13.0.0 - 13.10.1, have been addressed with patches. Users are advised to upgrade to the latest version, while Umbraco Cloud projects will receive automatic updates. Further details are available in the release notes.
Umbraco 17 introduces a new method for generating preview URLs through IUrlProvider implementations, replacing the previous internal and external preview URL generation methods. This change addresses the removal of SendingContentNotification in V14 and supports the demand for external previews. Custom URL providers must adapt to this new structure.
Umbraco 16 is a focused release enhancing the editing and developer experience, serving as a precursor to Umbraco 17 LTS. Key features include a new customizable Rich Text Editor, property-level permissions, and improved backoffice accessibility. This version aims to streamline upgrades and provide a solid foundation for future projects.