Joomla! Update 4.1.2 und Joomla! 3.10.8

Quelle:joomla.de

01 Apr 2022

Joomla 4.1.2 & 3.10.8 sind jetzt verfügbar. Dies ist ein Security-Release für die 4.x und 3.x Serie von Joomla, die einige Sicherheitslücken behebt und verschiedene Fehlerbehebungen und Verbesserungen enthält.

Wichtige Information!

Wenn bereits auf 3.10.7 oder 4.1.1 aktualisiert wurde und der Superbenutzer sich nicht mehr anmelden kann, bitte diese Release-FAQ aufmerksam lesen, um das Problem zu lösen.

Was ist neu in Joomla 4.1.2?

Joomla 4.1.2 enthält alle Änderungen von 4.1.1 mit Ausnahme eines Reverts von 20220303, das Probleme verursachte.

Sicherheitsprobleme mit 4.1.1 behoben:

[20220301] Low Severity - Moderate Impact - Zip Slip within the Tar extractor (affecting Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/870-20220301-core-zip-slip-within-the-tar-extractor.html)
[20220302] Low Severity - Low Impact - Path Disclosure within filesystem error messages (affecting Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/871-20220302-core-path-disclosure-within-filesystem-error-messages.html)
[20220305] Low Severity - High Impact - Inadequate filtering on the selected Ids (affecting Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/874-20220305-core-inadequate-filtering-on-the-selected-ids.html)
[20220306] Low Severity - Low Impact - Inadequate validation of internal URLs (affecting Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/875-20220306-core-inadequate-validation-of-internal-urls.html)
[20220307] Low Severity - Moderate Impact - Variable Tampering on JInput $_REQUEST data (affecting Joomla! 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/876-20220307-core-variable-tampering-on-jinput-request-data.html)
[20220308] Low Severity - Moderate Impact - Inadequate content filtering within the filter code (affecting Joomla! 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/877-20220308-core-inadequate-content-filtering-within-the-filter-code.html)
[20220309] Low Severity - Moderate Impact - XSS attack vector through SVG (affecting Joomla! 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/878-20220309-core-xss-attack-vector-through-svg.html)

Bugfixes und Verbesserungen:

Fix language strings behaviour in TinyMCE
Fix switch for syntax highlighting in TinyMCE
Show failed tasks in scheduler
Correct usage of Jooa11y parameters
Codemirror enhancements
Several 8.x PHP fixes

Auf GitHub findet ihr die komplette Liste der Bugfixes und Verbesserungen.

Was ist neu in Joomla 3.10.8?

Joomla 3.10.8 enthält alle Änderungen von 3.10.8 mit Ausnahme eines Reverts von 20220303, das Probleme verursachte.

Sicherheitsprobleme mit 3.10.7 behoben:

[20220301] Low Severity - Moderate Impact - Zip Slip within the Tar extractor (affecting Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/870-20220301-core-zip-slip-within-the-tar-extractor.html)
[20220302] Low Severity - Low Impact - Path Disclosure within filesystem error messages (affecting Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/871-20220302-core-path-disclosure-within-filesystem-error-messages.html)
[20220304] Low Severity - Moderate Impact - Missing input validation within com_fields class inputs (affecting Joomla! 3.7.0 through 3.10.6) More information » (https://developer.joomla.org/security-centre/873-20220304-core-missing-input-validation-within-com-fields-class-inputs.html)
[20220305] Low Severity - High Impact - Inadequate filtering on the selected Ids (affecting Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/874-20220305-core-inadequate-filtering-on-the-selected-ids.html)
[20220306] Low Severity - Low Impact - Inadequate validation of internal URLs (affecting Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0) More information » (https://developer.joomla.org/security-centre/875-20220306-core-inadequate-validation-of-internal-urls.html)