Engineering notes

Specific Sitecore and Umbraco problems, the code that solved them, and the part that still does not work. Written by the people who did the work.

12 articles

April 2025: the advisory got worse three days after the patch shipped
Umbraco

April 2025: the advisory got worse three days after the patch shipped

Umbraco patched CMS 14 and 15 on April 8 and raised the severity from moderate to high on April 11. Plus Canadian hosting, Flexible Environments, SSO, and uSync 15.1.6.

Read more
March 2025: the Umbraco patch you could not apply where you stood
Umbraco

March 2025: the Umbraco patch you could not apply where you stood

March's advisory fixed two moderate CMS issues plus a high-severity ImageSharp CVE, but only on the latest minor of each supported major. Also: uSync 13.2.7 and 15.1.5, a V8-to-V13 upgrade written up honestly, and a backoffice accessibility fix.

Read more
February 2025: Umbraco 8 went out of support, at the bottom of a quarterly digest
Umbraco

February 2025: Umbraco 8 went out of support, at the bottom of a quarterly digest

Umbraco 8 reached end of life in February 2025, alongside Azure TLS deadlines, a Cloud WAF default and Commerce 15 throughput claims. Six citable items in the whole month, three of them from umbraco.com.

Read more
January 2025: the patch was easy, getting to the patch was not
Umbraco

January 2025: the patch was easy, getting to the patch was not

Three moderate-severity issues patched on 21 January 2025 in Umbraco 10.8.8, 13.5.3, 14.3.2 and 15.1.2 — and the catch is that you must already be on the latest minor. Six items in the whole month, half of them from Umbraco HQ.

Read more