Versie 3.4.7 van Joomla! is uitgekomen. Joomla! is een dynamisch, in php geschreven contentmanagementsysteem, dat kan worden gebruikt om bijvoorbeeld een weblog, website of samenwerkingssite te maken. Om het programma in het Nederlands te gebruiken kun je onder andere op Joomla Community terecht. In versie 3.4 zijn onder meer verbeteringen aan de editor aangebracht en is de beveiliging aangescherpt. In deze update zijn verder nog twee beveiligingsproblemen verholpen.
What's in 3.4.7
Version 3.4.7 is released to address two reported security vulnerabilities and includes security hardening of the MySQLi driver to help prevent object injection attacks.
The Joomla Security Strike team has been following up on the critical security vulnerability patched last week. Since the recent update it has become clear that the root cause is a bug in PHP itself. This was fixed by PHP in September of 2015 with the releases of PHP 5.4.45, 5.5.29, 5.6.13 (Note that this is fixed in all versions of PHP 7 and has been back-ported in some specific Linux LTS versions of PHP 5.3). The only Joomla sites affected by this bug are those which are hosted on vulnerable versions of PHP. We are aware that not all hosts keep their PHP installations up to date so we are making this release to deal with this issue on vulnerable PHP versions.Security Issues Fixed
- High Priority - Core - Session Hardening (affecting Joomla 1.5 through 3.4.6) More information
- Low Priority - Core - SQL Injection (affecting Joomla 3.0.0 through 3.4.6) More information
:strip_exif()/i/2004545204.png?f=thumbmedium)
:strip_icc():strip_exif()/u/56108/STRESSED_1.jpg?f=community){kind=small}