Am 28.08.2018 wurde eine weitere Joomla Version veröffentlicht. Es wurden 3 kleine Sicherheitslücken geschlossen und 4 Fehler behoben.

Security Issues Fixed

• Low Priority - Core -  Hardening the InputFilter for phar stubs (affecting Joomla 1.5.0 through 3.8.11) More information »
• Low Priority - Core - Stored XSS vulnerability in the frontend profile (affecting Joomla 1.5.0 through 3.8.11) More information »
• Low Priority - Core - ACL Violation in custom fields (affecting Joomla 3.7.0 through 3.8.11) More information »

Bug Fixes

• mod_articles_latest and mod_articles_news: fix to show featured articles #21336
• Tags in com_content: fix to display tags when other item info are set to hidden #21275
• com_tags: All Tags default layout #21031
• Allows filtering by the archived state in the redirect component #21673

 Unsere dringende Empfehlung: SOFORT AKTUALISIEREN !!!

Am 31.07.2018 wurde eine weitere Joomla Version veröffentlicht die 37 Fehler behebt.

Bug Fixes

• Fix for the Missing "Select Type" field in the Extensions Manager #20881
• Replace the URL parameter "limitstart=0" by "start=0" when SEF is enabled #19452
• Remove non callable array items from field categories #20093
• Articles - Category Module: New ‘showon’ attribute for form fields #20950
• Fix OpenSearch implementation #20937
• Fix for tag filtering in Featured Articles view in administrator #21138
• Fix for filtering Featured Articles by access level in administrator #21168
• Media manager: relative paths for video files #21156
• Com_menus: removal of useglobal attribute #21095
• Multilingual Associations Component: fix associations in sidebyside view for contact and newsfeeds #21180

Am 22.05.2018 wurde eine weitere Joomla Version veröffentlicht.

Security Issues Fixed

• Low Priority  - Core - ACL violation in access levels (affecting Joomla 2.5.0 through 3.8.7) More information »
• Low Priority -  Core - Add phar files to the upload blacklist (affecting Joomla 2.5.0 through 3.8.7) More information »
• Moderate Priority -  Core - Information Disclosure about unpublished tags (affecting Joomla 3.1.0 through 3.8.7) More information »
• Low Priority -  Core - Installer leaks plain text password to local user (affecting Joomla 3.0.0 through 3.8.7) More information »
• Moderate Priority -  Core - XSS Vulnerabilities & additional hardening (affecting Joomla 3.0.0 through 3.8.7) More information »
• Low Priority - Core - Filter field in com_fields allows remote code execution (affecting Joomla 3.7.0 through 3.8.7) More information »
• Low Priority - Core - Session deletion race condition (affecting Joomla 3.0.0 through 3.8.7)  More information »
• Low Priority - Core - Possible XSS attack in the redirect method (affecting Joomla 3.2.1 through 3.8.7)  More information »
• Low Priority - Core - XSS vulnerability in the media manager (affecting Joomla 1.5.0 through 3.8.7)  More information »

Bug Fixes

• Miscellaneous accessibility improvements for the Backend
• Support Codemirror's included key mappings #19833
• Make CodeMirror work in repeatable subforms #12542
• Fix for JUserHelper::addUserToGroup() when user group title is a number #20091
• [com_content] Filter by no author #20245
• Sending passwords by email disabled by default for new installs #20247

 Unsere dringende Empfehlung: SOFORT AKTUALISIEREN !!!