https___www.joomla.org_announcements.html_start_30_2.xml
http___forum.joomla.hr_index.php_topic_4910.msg17401.html_1.xml
1.1 1.2 2.1 3.1 5.1 5.2 5.3 5.4 6.1 7.1 8.1 9.1 9.2 9.3 9.4 9.5 10.1 11.1 12.1 13.1 13.2 13.3 13.4 13.5 14.1 15.1 17.1 18.1 18.2 18.3 18.4 18.5 18.6 19.1 19.2 19.3 20.1 21.1 22.1 23.1 25.1 25.2 25.3 25.4 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1
Joomla! News - Details - Category: Project Release News Joomla! 3.4.7 is now available. This is a security release for the 3.x series of Joomla which addresses a critical security vulnerability and one low level security vulnerabilities. We strongly recommend that you update your sites immediately. This release only contains the security fixes; no other changes have been made compared to the Joomla 3.4.6 release. What's in 3.4.7 Version 3.4.7 is released to address two reported security vulnerabilities and includes security hardening of the MySQLi driver to help prevent object injection attacks. The Joomla Security Strike team has been following up on the critical security vulnerability patched last week. Since the recent update it has become clear that the root cause is a bug in PHP itself. This was fixed by PHP in September of 2015 with the releases of PHP 5.4.45, 5.5.29, 5.6.13 (Note that this is fixed in all versions of PHP 7 and has been back-ported in some specific Linux LTS versions of PHP 5.3). The only Joomla sites affected by this bug are those which are hosted on vulnerable versions of PHP. We are aware that not all hosts keep their PHP installations up to date so we are making this release to deal with this issue on vulnerable PHP versions. Security Issues Fixed - High Priority - Core - Session Hardening (affecting Joomla 1.5 through 3.4.6) More information » - Low Priority - Core - SQL Injection (affecting Joomla 3.0.0 through 3.4.6) More information » Please see the documentation wiki for FAQ’s regarding the 3.4.7 release. It is important to note that due to some session changes you will not be able to edit items until you log out and log back in again. Please note that there has been a backwards compatibility break regarding how session management is handled. If you are using the documented Joomla API you will have no issues. The changes are fully documented in the release documentation. - Details - Category: Project Release News A Joomla 3.4.7 release containing a security fix will be published today (Monday 21st December) at approximately 21:00 UTC The Joomla Security Strike team has been following up on the critical security vulnerability patched last week. Since the recent update it has become clear that the root cause is a bug in PHP itself. This was fixed by PHP in September of this year (2015) with the releases of PHP 5.4.45, 5.5.29, 5.6.13 (N.B. Fixed in all versions of PHP 7 and has been backported in some specific Linux LTS versions of PHP 5.3). The only Joomla sites affected by this bug are those which are hosted on vulnerable versions of PHP. We are aware that not all hosts keep their PHP installations up to date so we are releasing a Joomla Update later today which contains additional protection for those users. We do of course recommend that all users apply this update as soon as possible. From Joomla 3.4.6, performing an update to the new version is as simple as logging in and clicking an update button. The update version warning notice will be clearly visible as soon as an administrator logs in. Joomla advises that there are Joomla extensions available that can apply updates automatically. Although no longer supported officially, the Joomla Security Strike Team plans to issue patches for Joomla versions 1.5 and 2.5. Until the release is out, please understand that we cannot provide any further information. - Details - Category: Project Release News Joomla! 3.4.6 is now available. This is a security release for the 3.x series of Joomla which addresses a critical security vulnerability and 4 low level security vulnerabilities. We strongly recommend that you update your sites immediately. This release only contains the security fixes; no other changes have been made compared to the Joomla 3.4.5 release. What's in 3.4.6 Version 3.4.6 is released to address four reported security vulnerabilities and includes security hardening of the user password reset system. Security Issues Fixed - High Priority - Core - Remote Code Execution (affecting Joomla 1.5 through 3.4.5) More information » - Low Priority - Core - CRSF Hardening (affecting Joomla 3.2.0 through 3.4.5) More information » - Low Priority - Core - Directory Traversal (affecting Joomla 3.2.0 through 3.4.5) More information » - Low Priority - Core - Directory Traversal (affecting Joomla 3.4.0 through 3.4.5) More information » Please see the documentation wiki for FAQ’s regarding the 3.4.6 release.
1.1 1.2 1.3 2.1 2.2 3.1 3.2 4.1 5.1 6.1 6.2 7.1 7.2 8.1 8.2 9.1 10.1 10.2 11.1 12.1 13.1 14.1 14.2 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1
Joomla! 3.6.5 je objavljena. Ovo je sigurnosno izdanje za Joomla 3.x seriju. Ovo izdanje ispravlja tri sigurnosne pogreške , dodatno očvršćavanje sigurnosti i ispravak tri buga. Drugih promjena naspram 3.6.4 nije bilo.Jako preporučamo da nadogradite svoje Joomle 3 što je prije moguće.Što sadrži 3.6.5? Izdanje 3.6.5 ispravlja tri sigurnosne pogreške, dodatno očvršćavanje sigurnosti i ispravak tri buga.Ispravljeni sigurnosni propusti Ispravljene pogreške u kodu - Visoki prioritet - Core -Podizanje korisničkih prava (zahvaća Joomla! 1.6.0 do 3.6.4) - više informacija - Niski prioritet - Core - Upload "shella" (zahvaća Joomla! 3.0.0 do 3.6.4) - više informacija - Niski prioritet - Core - Razotkrivanje informacija (zahvaća Joomla! 3.0.0 do 3.6.4) - više informacija - Očvršćivanje sigurnosti - više informacija Za poznate probleme s Joomla! 3.6.5 izdanjem pogledajte Verzija 3.6.5 FAQ na stranici s dokumentacijom.VAŽNO! - #12817 - Ispravak Joomla Updatera za Windows korisnike - #12984 - Ispravak instalacijskog jezika za sr-YU - #12589 i #13127 - Ispravak početnih vrijednosti za izradu korisnika kod instalacije Update s Joomli 3.4.x ili 3.5.x na 3.6.5 ne možete raditi putem Extension Managera! Koristite Update funkciju ili ručnu nadogradnju kako je opisano u dokumentaciji .PreuzimanjaNove instalacije: Kliknite ovdje za download Joomla 3.6.5 (Puni paket) » - nove upute za instalaciju i tehnički zahtjeviNadogradnja: Kliknite ovdje za download Joomla 3.6.5 (Paket nadogradnje) » - napomena: molimo pročitajte upute za nadogradnju prije nadogradnje. - molimo ne zaboraviti isprazniti cache preglednika nakon izvršene nadogradnjeOgroman Hvala! za sve naše volontere! Zahvaljujemo članovima Joomla JSST tima koji je promptno ispravio ove pogreške.