← Older revision

Revision as of 17:46, 19 May 2013

(2 intermediate revisions by one user not shown)

Line 1:

−

{{notice|This document has now been replaced by the website at [http://vel.joomla.org/] vel.joomla.org from 1st May 2013

+

{{notice|This document has now been replaced by the website at [http://vel.joomla.org/ vel.joomla.org from 1st May 2013]

Please refer to there for the latest updates}}

Line 12:

'''Please check with the extension publisher in case of any questions over the security of their product.'''

{{notice|small=yes|image=Stop hand nuvola.svg

−

|header=Procedure change|All reports are now to be made via vel.joomla.org.}}

+

|header=Procedure change|All reports are now to be made via vel.joomla.org}}

−

Report Vulnerable extensions in the [[http://vel.joomla.org|vel~~.joomla.org~~]~~] clearly marked with the first word in the title being ''Vulnerable'' where the security moderators or JSST team will respond.~~

+

Report Vulnerable extensions in the [http://vel.joomla.org vel website]

−

~~This list is change protected,''' for additions or updates email''' ''vel @ joomla.org''~~

+

*If you are seeing this page on any site other than [http://docs.joomla.org/Vulnerable_Extensions_List the Offical Joomla Documentation] you may be seeing an out of date version or experiencing [http://en.wikipedia.org/wiki/Plagiarism plagiary] and the links may not work properly

== How to use this list ==

'''Items will be removed after a suitable period and not on resolution.'''

+

{{notice|This document has now been replaced by the website at [http://vel.joomla.org/ vel.joomla.org from 1st May 2013]

+

Please refer to there for the latest updates}}

All known vulnerable extensions are the listed in the first column "Extension". Any in a red box are where we have not been given a fix. Any in a turquoise box contain a link to the notice about an update with link. Any that are in an uncolored box are a "Contact the Developer About This Extension".

Line 46:

Line 47:

4- Make sure to include a notice in the JED description to the fact that the new release is a "Security Release" and those who use the extension should upgrade immediately.

−

5- ~~Email~~ the ~~VEL team with a notice of~~ resolution, the ~~latest version number '''and''' a link to the security release statement on your~~ website

+

5-complete the resolution form on the website at [http://vel.joomla.org/ vel.joomla.org from 1st May 2013]

6- Create a [http://bit.ly/velunlist JED listing owner ticket] to the JED with a notice and ask that your listing be republished. Include the full details of your new version number and security notice page

Joomla! Documentation - Changes related to "Category:Component Management" [en]

Vulnerable Extensions List

@@ Line 1: / Line 1: @@
-{{notice|This document has now been replaced by the website at [http://vel.joomla.org/] vel.joomla.org from 1st May 2013
+{{notice|This document has now been replaced by the website at [http://vel.joomla.org/ vel.joomla.org from 1st May 2013]
 Please refer to there for the latest updates}}
@@ Line 12: / Line 12: @@
 '''Please check with the extension publisher in case of any questions over the security of their product.'''
 {{notice|small=yes|image=Stop hand nuvola.svg
-   |header=Procedure change|All reports are now to be made via vel.joomla.org.}}
+   |header=Procedure change|All reports are now to be made via vel.joomla.org}}
-Report Vulnerable extensions in the [[http://vel.joomla.org|vel.joomla.org]]  clearly marked with the first word in the title being ''Vulnerable'' where the security moderators or JSST team will respond.
+Report Vulnerable extensions in the [http://vel.joomla.org vel website]
-This list is change protected,''' for additions or updates email''' ''vel @ joomla.org''
 *If you are seeing this page on any site other than [http://docs.joomla.org/Vulnerable_Extensions_List the Offical Joomla Documentation] you may be seeing an out of date version or experiencing [http://en.wikipedia.org/wiki/Plagiarism plagiary] and the links may not work properly
 == How to use this list ==
 '''Items will be removed after a suitable period and not on resolution.'''
 All known vulnerable extensions are the listed in the first column "Extension". Any in a <span style="background:red; color:white">red box </span>are where we have not been given a fix. Any in a <span style="background:#cef2e0; color:black">turquoise box</span> contain a link to the notice about an <span style="background:#cef2e0; color:black">update with link.</span> Any that are in an uncolored box are a "Contact the Developer About This Extension".
@@ Line 46: / Line 47: @@
 - Make sure to include a notice in the JED description to the fact that the new release is a "Security Release" and those who use the extension should upgrade immediately.
-- Email the VEL team with a notice of resolution, the latest version number '''and''' a link to the security release statement on your website
+-complete the resolution form on the website at [http://vel.joomla.org/ vel.joomla.org from 1st May 2013]
 - Create a [http://bit.ly/velunlist JED listing owner ticket] to the JED with a notice and ask that your listing be republished. Include the full details of your new version number and security notice page