[SECURITY-L] [Urgent] Joomla Security Update

CSIRT Unicamp security em unicamp.br
Seg Out 26 10:24:05 -02 2015


Joomla! 3.4.5 Released
=============================

Joomla! 3.4.5 is now available. This is a security release for the 3.x
series of Joomla which addresses a critical security vulnerability. We
strongly recommend that you update your sites immediately. This release
only contains the security fixes; no other changes have been made
compared to the Joomla 3.4.4 release.

## What's in 3.4.5

Version 3.4.5 is released to address three reported security
vulnerabilities and includes additional security hardening of the
UploadShield system.

## Security Issues Fixed

- High Priority - Core - SQL Injection (affecting Joomla 3.2 through
3.4.4)
(http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html)
- Medium Priority - Core - ACL Violations (affecting Joomla 3.2 through
3.4.4)
(http://developer.joomla.org/security-centre/629-20151002-core-acl-violations.html)
- Medium Priority - Core - ACL Violations (affecting Joomla 3.0 through
3.4.4)
(http://developer.joomla.org/security-centre/630-20151003-core-acl-violations.html)

Please see the documentation wiki for FAQ’s regarding the 3.4.5 release:
https://docs.joomla.org/Category:Version_3.4.5_FAQ



Mais detalhes sobre a lista de discussão SECURITY-L