News for hackers. Stuff that matters.

A comment on Security update for IntelliJ-based IDEs v2016.1 and older versions.

Re:Security update for IntelliJ-based IDEs v2016.1 and older... by w23j on Wednesday May 11, 2016 @01:19PM (#11677203)
So I have just updated WebStorm. The "About" dialog now says:

  WebStorm 11.0.4
  Build #WS-143.2370, built on April 29, 2016
"Check for Update" tells me I have the latest version.

However the FAQ (http://blog.jetbrains.com/blog/2016/05/11/security-update-fo...) says:

  "All updates published after May 10th contain the security update."
Which would mean that a version built "April 29, 2016" is vulnerable?

Also the linked download page (https://confluence.jetbrains.com/display/WI/Previous+WebStor...) says:

  "Latest version: WebStorm 11.0.5 (build 143.2370, May, 11 2016)"
That is, the version number and date are different from what I have, but the build number is the same?!

Maybe it's too late in the day for me to think straight, but somethings wrong here. What product versions are safe?

[ Parent | on HN ]
Re:Security update for IntelliJ-based IDEs v2016.1 and older... by prigara on Wednesday May 11, 2016 @01:44PM (#11677488)
Sorry for the confusion. The latest update for version 11 is 11.0.4 and you're using it now. It fixes the vulnerability. I fixed the error on the confluence page, thanks for pointing that out.
[ Parent | on HN ]