Difference between revisions of "Security hotfixes for Joomla EOL versions/en"

From Joomla! Documentation

(Importing a new version from external source)
(Importing a new version from external source)
Line 24: Line 24:
 
   
 
   
  
===File Upload Security Patch===
+
== File Upload Security Patch ==
 
There is a security issue in all versions of Joomla! related to unauthorized file uploads.
 
There is a security issue in all versions of Joomla! related to unauthorized file uploads.
 
* Read the [http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626 Issue Tracker Item] for details.
 
* Read the [http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626 Issue Tracker Item] for details.

Revision as of 06:40, 17 December 2015

Other languages:
Deutsch • ‎English • ‎Nederlands • ‎eesti • ‎español • ‎français
Stop hand nuvola.svg.png
Warning!

Do not rely on all security issues being patched or reported for EOL (end of life) versions.

Joomla! 
3.4.6
is the current version

This page is for Joomla! versions which have reached EOL(end of life) and are no longer being developed or supported by the Joomla! project. Issues and items are only listed on this page as a benefit to the users of EOL versions who have not migrated to a supported version yet.

It is strongly recommended you update your websites to a supported Joomla! version ASAP.

Joomla! 2.5

Remote Code Execution

There is a security issue in Joomla! from Joomla 1.5 up until 3.4.5 related to remote code execution.


Joomla! 1.5

Although Joomla! 1.5 has reached EOL(end of life), if there is a critical security issue with a fix it may be reported here.

Remote Code Execution

There is a security issue in Joomla! from Joomla 1.5 up until 3.4.5 related to remote code execution.


File Upload Security Patch

There is a security issue in all versions of Joomla! related to unauthorized file uploads.

File Upload Security Patch Update Instructions:
  1. Download & Unpack the security patch
  2. Upload patch files via ftp directly to the root of your Joomla! installation, overwriting existing files.


Flash Uploader

The flash uploader has been removed from Joomla! 2.5 and Joomla! 3 for security reasons. 1.5 users should do the same and can do so first by removing the file and then by setting the option for it to off.


See also

Joomla! 1.5

Joomla! 2.5

Joomla! 3.4