The Joomla! Project and the Production Leadership Team are proud to announce the release of Joomla! 3.2.3 which is a security release and also resolves a significant number of issues and bugs.
If you are currently running Joomla! 3.2, we urge you to apply this update immediately via either the one-click update or the update downloads available at http://www.joomla.org/download.html. For other versions of the 3.x series, applying the update is recommended as soon as possible.
Inadequate checking allowed unauthorised logins via GMail authentication.
Joomla! CMS versions 2.5.18 and earlier 2.5.x versions, 3.2.2 and earlier 3.x versions
Upgrade to version 2.5.19 or 3.2.3
The JSST at the Joomla! Security Center.
Inadequate escaping leads to XSS vulnerability.
Joomla! CMS versions 2.5.18 and earlier 2.5.x versions, 3.2.2 and earlier 3.x versions
Upgrade to version 2.5.19 or 3.2.3
The JSST at the Joomla! Security Center.
Inadequate escaping leads to XSS vulnerability in com_contact.
Joomla! CMS versions 3.1.2 through 3.2.2
Upgrade to version 3.2.3
The JSST at the Joomla! Security Center.
Inadequate escaping leads to SQL injection vulnerability.
Joomla! CMS versions 3.1.0 through 3.2.2
Upgrade to version 3.2.3
The JSST at the Joomla! Security Center.
The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.19.
Joomla 2.5.19 is a security release addressing two medium level vulnerabilities.
The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than copying the files with FTP.
Note: Please read the update instructions before updating.
*Please clear your browser’s cache after upgrading
Want to test drive Joomla? Try the online demo. Documentation is available for beginners.
Check the Joomla 2.5.19 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.
See http://developer.joomla.org/version-2-5-19-release-notes.html for details of the tracker items fixed.
There are a variety of ways in which you can get actively involved with Joomla! It doesn’t matter if you are a coder, an integrator, or merely a user of Joomla!. You can contact the Joomla! Community Development Manager, David Hurley, to get more information, or if you are ready you can jump right into the Joomla! Bug Squad.
The Joomla! Bug Squad is one of the most active teams in the Joomla! development process and is always looking for people (not just developers) that can help with sorting bug reports, coding patches and testing solutions. It’s a great way for increasing your working knowledge of Joomla!, and also a great way to meet new people from all around the world.
If you are interested, please read about us on the Joomla! Documentation Wiki and, if you wish to join, email Mark Dexter or Nick Savov, our Bug Squad co-coordinators.
You can also help Joomla! development by thanking those involved in the many areas of the process. In the past year, for example, over 1,100 bugs have been fixed by the Bug Squad.
Thank you to the code contributors and active Bug Squad members that created and tested this release:
Ben Charlton, Benjamin Trenkle, Brian Teeman, Carsten Wirtz, Christiane Maier-Stadtherr, Cyril Rezé, Denise McLaurin, Eino Mäkitalo, Fedik Zinchuk, George Wilson, Gunjan Patel, Hannes Papenberg, Ionut Lupu, Javier Gomez, Jean-Marie Simonet, Jonathan Cameron, Leo Lammerink, Marc Antoine Thevenet, Marco Richter, Marko Đedović, Matt Thomas, Michael Babker, Nikolai Plath, Peter van Westen, Piotr Mocko, Roberto Segura, Sander Potjer, Simon Asika, Thomas Hunziker, Tobias Zulauf, Toivo Talikka, Valentin Despa, Yannick Gaultier.
Thank you to the Joomla! Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla!, please report it on the Joomla! CMS Issue Tracker.
Active members of the Joomla! Bug Squad during past 3 months include: Achal Aggarwal, Anderson Martins, Anibal Sanchez, Ben Charlton, Ben Griffin, Brian Teeman, Camden Narzt, Christiane Maier-Stadtherr, Cyril Rezé, Daniel Dimitrov, Denise McLaurin, Dennis Hermacki, easteregg easteregg, Edwin Cheront, Elijah Madden, Fedik Zinchuk, Gary Mort, George Wilson, Hannes Papenberg, Jean-Marie Simonet, Jozsef Tamas Herczeg, Jurian Even, Kevin Griffiths, Kunal Bajpai, Lao Neo, Leo Lammerink, Marc Antoine Thevenet, Marcel van Beelen, Marco Richter, Marko Đedović, Matt Thomas, Max Sarte, Melih Tas, Michael Babker, Mohammad Hasani Eghtedar, Nicholas Dionysopoulos, Nikolai Plath, Parth Lawate, Peter van Westen, Piotr Gasiorowski, Piotr Mocko, Robert Gastaud, Roberto Segura, Samuel Moffatt, Sander Potjer, Serge Litvinov, Simon Asika, Stefania Gaianigo, Thomas Hunziker, Thomas Jackson, Thomas Kuschel, Tino Brackebusch, Tobias Zulauf, Toivo Talikka, Valentin Despa, Yannick Gaultier.
Bug Squad Leadership: Mark Dexter and Nick Savov, Co-Coordinators.
A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla! secure. Members include: Airton Torres, Alan Langford, Beat, Bill Richardson, Claire Mandville, David Hurley, Don Gilbert, Gary Brooks, Jason Kendall, Javier Gomez, Jean-Marie Simonet, Marijke Stuivenberg, Mark Boos, Mark Dexter, Matias Griese, Michael Babker, Nick Savov, Pushapraj Sharma, Roberto Segura, Rouven Weßling, Thomas Hunziker.
(Mar 6) IcedTea Web could be made to expose or alter sensitive information.
(Mar 6) Several security issues were fixed in Tomcat.
(Mar 5) An updated activemq package that fixes multiple security issues is now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having [More…]
(Mar 5) Updated subversion packages that fix three security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Moderate [More…]
Since the release of EasyApache 3.24.11, you may have noticed a variation of the following warning message when starting EasyApache: Your server is currently on cPanel & WHM version 11.36.2.12. This version of cPanel & WHM has reached End of Life. cPanel & WHM version 11.36.2.12 will continue to receive …
The following issues were resolved:
[-] nginx-serve-static property in API request is not accepted with error “Setting nginx-serve-static does not supported” if nginx server is stopped (PPPM-807)
[-] Mail messages do not have DomainKeys signature after running mchk utility (PPPM-1014)
[-] User cannot restore MSSQL databases after upgrade from older Plesk version if he had Windows x64 and MSSQL server x86 (PPPM-1188)
[-] (Customer & Business Manager) Upgrade from 11.0.9 to 11.5.30 failed with error message “1054 Unknown column ‘allow_multiply'”. (PPPM-1220)
59 queries. 8.5 mb Memory usage. 0.568 seconds.