As a courtesy to our customers, we maintain a list of recent versions and the important security updates for DNN / DotNetNuke. Generally, the most current version of your CMS is the most secure, but if you have an older version of your CMS, it can be hard to find information on whether your version is secure or not.
What is the latest secure version of DNN?
DNN 9.13.3 — Minor Feature Updates & Bug Fixes
DNN 9.13.3 is a minor update to the platform
Notable Changes
- Updated several dependencies
- Bug Fixes
DNN 9.13.2 — Minor Feature Updates & Bug Fixes
DNN 9.13.2 is a minor update to the platform
Notable Changes
- Added file open command to Resource Manager
- Bug Fixes
DNN 9.13.1 — Minor Feature Updates & Bug Fixes
DNN 9.13.1 is a minor update to the platform
Notable Changes
- Improved Logging
- Improved Caching in multiple areas
- Updated depdencies
- Bug Fixes
DNN 9.13.0 — Feature Updates & Bug Fixes
DNN 9.13.0 is a major update to the platform
Notable Changes
- CKE added option to allow file browsers by permissions
- Updated SMTP Provider to support OAuth Authentication
- Updated several dependencies
- Bug Fixes
DNN 9.12.0 — Minor Feature Updates & Bug Fixes
DNN 9.12.0 is a minor update to the platform
Notable Changes
- Added new Google Analytics Connector
- Bug Fixes
DNN 9.11.2 — Minor Feature Updates & Bug Fixes
DNN 9.11.2 is a minor update to the platform
Notable Changes
- Added UserID to the Users module
- Minor Scheduler Adjustment
- Bug Fixes
DNN 9.11.1 — Minor Feature Updates & Bug Fixes
DNN 9.11.1 is a minor update to the platform
Notable Changes
- Minor updates to the newly implemented Resource Manager
- Minor updates to several dependencies
- Bug Fixes
DNN 9.11.0 — Feature Update
DNN 9.11.0 is a major update to the platform
Notable Changes
- Optional Telerik Removal. Telerik can still be used for modules that have a dependency on it. But, it will not be included in a fresh install
- Resource Manager (file management) has been redeveloped from the ground up.
- Performance Improvements. Updated a large number of dependencies, including Newtonsoft.Json & PetaPOCO.
- Minor Bug Fixes
DNN 9.5.0 is a major feature update that fixes numerous bugs in the DNN platform
Features
- Added support for SSL offloading values in headers
- Added a new banned icon to indicate unauthorized users
- Added glob pattern support to manifest file cleanup component
Improvements
- Ensures just setting the timezone prop in settings does not save to the database until a save is requested
- Improved display of journal links and comments (word wrapping)
- Improves display of missing language flags
- Moved email and display name above username and password in registration form
- Made form messages 100% width for better responsive alignment in modules
- Updated several localization texts to better represent current Dnn UI
- Bumped jQuery and jQuery related plugins versions
- Improved progress bar on translation progress
- Fixed a typo FreindlyName => FriendlyName
- Ensures that a user is read from data store before we use it in mail
- Improved display of import progress
- Fixed a typo in Azure folder settings Syhchronization => Synchronization
- Updated Blueimp uploader to the latest version
- Enhanced robots.txt to better support modern development practices
- Removed Dnn Copyright injection
- Changed cache-busting URLs to use a hash
- Improved performance in the pages treeview
- Improved performance of core messaging
Fixes
- Fixed an issue when logging 404 errors with invalid UrlReferrer
- Fixed an issue where the login page would go into an infinite loop in SSL offloaded environments
- Fixed an issue where in some cases it was impossible to edit module settings after moving a module to another page
- Fixed an issue where PageTags where created in the wrong vocabulary scope
- Fixed an issue where module settings would not save under some conditions
- Fixed multiple issues with wrong mapping of Canonical and None mapping types
- Fixed an issue that would show an error when trying to delete a localized version of the home page
- Fixed an issue where the wrong CDN protocol was used under SSL Offloading environments
- Fixed an issue where opening page settings would sometimes show the settings for another page
- Fixed a display issue of Enabled and Priority in sitemap settings
- Fixed an issue where it was not possible to get the module ID properly when redirect mixed case URLs was enabled
- Changed the update service URL to a new service
- Fixed an issue where the wrong portal alias was used when adding new languages
- Fixed an issue where the wrong alias would show when editing portal URLs
- Restored a resource key that was accidentally deleted as part of GDPR
- Fixed an issue where connectors would change name upon disconnection or when adding multiple connectors
- Fixed an issue where pages in redirect mode would not work under SSL Offloaded environments
- Fixed module find logic in module attribute to not return deleted modules
- Fixed an issue with using dependency injection in MVC modules
- Fixed an issue where the Console and Module Creator modules would not install
- Fixed an issue where page tags where not kept when exporting a site and importing it on another instance
DNN 9.4.4 — Minor Feature Update
DNN 9.4.4 is a minor feature update that fixes a bug in the DNN platform
Fixes
- Fixed a regression issue where MVC modules could have a memory leak issue
DNN 9.4.3 — Minor Feature Update
DNN 9.4.3 is a minor feature update that fixes several bugs in the DNN platform
Improvements
- Allows changing from email while testing SMTP configurations
Fixes
- Fixed a regression issue where modules that use friendly Urls stopped working in 9.4.2
- Moved country above region in user profile so the region dropdown populates with correct value for the selected country
- Fixed an issue where it was impossible to delete a social role if the group folder was not empty
- Fixed an issue where Select All was not working in site assets
- Fixed an issue where the scheduler would fail when trying to delete removed objects
- Fixed a work breaking issue in the journal
- Fixed an issue in the Servers Persona Bar module where the underlaying page would not reload when requested to
- Fixed an issue where auto-generated child portal urls would include invalid alphanumeric characters
- Fixed an issue where the google analytics connecor would incorrectly lowercase the trackingId value
Known Issues
- There is currently a possible memory leak issue with MVC modules
DNN 9.4.2 — Minor Feature Update
DNN 9.4.2 is a minor feature update that adds functionality to the DNN platform
Improvements
- Usernames are no longer changed to the emails when the settings required the email as username
- Added a warning during install/upgrades that .Net Framework 4.7.2 is required if not present
- Added a tooltip to indicate to use about 60 characters for best SEO on site descriptions
- Remove Thread Cancellation from OAuthClientBase Implementation
- Created INavigationManager to replace Globals.NavigateURL to use Dependency Injection
- Improvements with module permissions when copying modules
- Whitespace is now properly visible in the log viewer
- Removed "No Search Results" display before any search is performed
- Improved install process to use managedPackage for library dependencies
- Made navigation stays on same page after creating a new group instead of redirecting to the group page
Fixes
- Updated default portal template so it provides default permissions on portal folders
- Fixed an issue where site settings where not working after setting up "PRIVACY" section on multi language sites
- Fixed an issue where sending multiple emails with attachments would fail
- Fixed an issue where the validation of alphanumeric characters for password requirements was wrong
- Fixed an issue where it was impossible to remove a site logo
- Fixed issue where vocabularies would cause an infinite loop
- Fixed an issue where users could not verify their account if they lost their original account verification email by adding a resend verification link to the unverified account message
- Prevents creation of blank role group names
- Fixed a memory leak issue with web api modules
- Fixed an issue where module settings dialog could not be opened if urls where converted to lower case
Known Issues
- It appears we might have an unwanted breaking change in DotNetNuke.Services.Url.FriendlyUrl.FriendlyUrlProvider.FriendlyUrl. If you have modules that use this API you may need to recompile them adding a reference to DotNetNuke.Abstractions.dll or wait for a resolution on this issue.
DNN 9.4.1 — Minor Feature Update
DNN 9.4.1 is a minor update to the platform that focuses heavily on bug fixes
Improvements
- Added missing html encoding to exceptions in the Admin Log
- Added a warning when installing or upgrading if the environment does not have .Net Framework 4.7.2 available
- Added a confirmation message after localization is saved
Fixes
- Fixed an issue where the assets manager activity wheel would constantly spin
- Fixed a potential xml namespace bug in web.config
- Fixed invalid binding redirects when upgrading to Dnn 9.4.0
- Corrected the DotNetNuke.Core NuGet package
- Fixed a null reference exception when calling Globals.LinkClick method
- Fixed an issue opening module settings due to selectize.js duplicate versions
- Fixed an issue with DDRMenu Razor templates and Dependency Injection
- Fixed an issue with jQuery browser detection
- Fixed several bugs around import/export
- Fixed an issue where the standalone version of selectize.js was not used when obtained by CDN
- Fixed an issue that prevented importing portal languages correctly
- Fixed an issue with import/export of deleted modules
- Fixed an issue where the upgrade to 9.4.0 would not save the new version in the database and would redirect to the upgrade wizard
- Fixed an issue where the print container action would not work
- Fixed an issue where the data consent last changed date would not read/save consistently in some cultures
- Fixed an issue where the smtp server tab would always show a separator line
- Fixed an issue with tab sorting before serialization during export
- Fixed an issue where the web server dropdown was failing in the scheduler
- Fixed an issue where the admin log would not include line breaks properly
- Fixed an issue where it was impossible to set email address as username to ON
- Fixed an issue with IP filters settings display
- Fixed an issue where the wrong portal would should in portal settings
- Fixed an issue where modules would get duplicated when localized
- Fixed an issue where the wrong overflow was applied to the body after closing the persona bar
- Fixed an issue where () characters where not replaced in URLs and improved the error message about the situation
- Fixed an issue that prevented the Persona Bar to upgrade correctly to 9.4.0
- Fixed an issue where the CkEditor provider would have the dll twice in the install package
DNN 9.4.0 — Feature Update
DNN 9.4.0 is a feature update that adds functionality to the DNN platform
Improvements
- Minimum required .NET framework changed to 4.7.2
- Added GDPR data consent functionality
- Added Dependency Injection and Removed Circular Dependencies in all Module Pipelines
- Updated all C# projects in the platform to compile under C# 7.0
- Replaced JRE based YUI Compressor with MSBuild version
- Made the Default Module Action Menu configurable
- Removed GetAzureCompactScript from SqlDataProvider
- Added setting to display search result for users in specific roles
- Added functionality to force user logout after password changed in other place
- Updated "About" information for DNN Platform to be more relevant and current
Fixes
- Corrected file access issues
- Dependencies will now load during startup even if one fails
- Fixed an issue where deleted pages would show in parent page selector
DNN 9.3.2 — Minor Feature Update
DNN 9.3.2 is a minor feature update to the platform that adds functionality to the DNN platform
Improvements
- Added a placeholder to avoid the delayed slide effect when loading the PersonaBar
- Secuirty Analyzed now displays the full path to make it easier to find suspicious files identified
- Azure folders in Digital Assets open faster
- Uses source-map for webpack config
Fixes
- Fixed an installation issue on lower performance database servers
Known Issues
- The ability to localize the default site into various languages at initial installation is currently non-functional. This is due to issues in the remote data-service provided by Dnn Corp.
Anything below DNN 9.3.2 is considered insecure, due to exploits that were found after their release