Security Release: Joomla! 3.7.3

Joomla!'s newest version, 3.7.3, is now published and available to address the following security vulnerabilities and bug issues:

    * Information Disclosure (affecting Joomla 1.7.3-3.7.2)
    * XSS Vulnerability (affecting Joomla 1.7.3-3.7.2)
    * XSS Vulnerability (affecting Joomla 1.5.0-3.6.5)

You can find more information in regards to version 3.7.3 and the recent security issues this version addresses within in this Joomla! blog post.

The Joomla! team strongly encourages all the users to update their Joomla! site(s) to the new version 3.7.3. Bitnami has released Bitnami Joomla! 3.7.3 installers, virtual machines and cloud images for all platforms. You can find instructions on how to upgrade your Bitnami Joomla! application here.

Have questions about Bitnami Joomla! or the Joomla! security vulnerability? Post to our Community Forum, and we will be happy to help you.

Joomla! 3.6.4 Security Release

The Joomla! project has just released a new version that fixes two critical security vulnerabilities, in addition to a bug fix for two-factor authentication.

This is a security release for the 3.x series and it only contains the security fixes, no other changes have been made. It is strongly suggested that you update your Joomla! website to the latest version.

You can find more info about these issue at the Joomla! release news.

We have released Bitnami Joomla! 3.6.4 Docker image, cloud images, installers and virtual machines that fix these issues.

Do you already have a Joomla! installation? You can follow our guide about how to upgrade your application and you won't have to worry about these vulnerabilities.

If you have further questions about Bitnami Joomla! or this security issue, please post to our community forum, and we would be happy to help you.

Joomla! 3.4.5 security release

The Joomla! project has just released a new version that fix multiple SQL injection and ACL violation vulnerabilities. 

This is a security release for the 3.x series and it only contains the security fixes, no other changes have been made. It is strongly suggested that you update your Joomla! website to the latest version. 

You can find more info about these issue at the Joomla! release news.

We have released Bitnami Joomla! 3.4.5 installers, virtual machines and Amazon EC2, Google, VMware vCloud Air, DigitalOcean and Azure cloud images that fix these issues. 

Do you already have a Joomla! installation? You can follow our guide about how to upgrade the application and you won't have to be worried about these vulnerabilities. 

Have questions about Bitnami Joomla! or the security issue? Post to our community forum, and we would be happy to help you.

Bitnami Open Source Leaders Interview Series: Isidro Baquero from Joomla!

Joomla! is one of the most popular content management systems, and is used all around the world for many types of websites. Behind the success of this application comes the support of a very large and energetic open source community. Whether you are a novice or a pro, you will find that there is no shortage of plugins and support to help you along the way.

As part of our Open Source Leader podcast series, we interviewed Isidro Baquero, member of the Joomla! community leadership team, to see how Joomla! can help you manage your website.

The questions below are answered throughout the interview:

• How does Joomla! differ from other CMS applications?
• When should you upgrade, and how? 
• What does the future hold for Joomla!? 
• How does one join the Joomla! community, and what skills are needed?

After learning more about the project, you can launch Joomla! to the cloud or deploy it locally with free installers, virtual machines and cloud templates from Bitnami. Get started in the cloud for free with a $200 credit from Microsoft Azure.

Stuart Langridge:       These are the Bitnami Open Source Leaders interviews. I’m Stuart Langridge, and I’m talking to Isidro Baquero, who is from the community leadership team of the Joomla Project.

Isidro Baquero:          Hi Stewart, nice to be here.

Stuart Langridge:       Please tell us a bit about what Joomla is.

Isidro Baquero:          Joomla is an open source project and started out as only a CMS (content management system), but it has grown with time. A couple of years ago, the framework in which the CMS was based got decoupled from the CMA. Now we have two different projects, the CMS and the standalone PHP framework, which can be used to develop any kind of web application. It integrates with Composer, so it can integrate within any other external scripts. 

                                    Like any other modern PHP framework, Joomla is known for the content management system. Although, I always like saying that Joomla is not a CMS, but an open source project. Without its community, Joomla would be nothing because it’s 100 percent community-driven and there is no corporate backing for the project.

Stuart Langridge:       Who is currently using Joomla? Obviously you’ve got a lot of people out there using it, but what types of organizations tend to use Joomla? Are there particular areas where you’d like to see Joomla used more?

Isidro Baquero:          Joomla is suitable for any kind of web application. We’ve seen everything from domestic applications, personal applications, small communities, and even big corporations. For example, Peugeot, the French carmaker has its main site built with Joomla.  We’ve also seen General Electric, for example, having some of their sites built with Joomla.

Security fix for Joomla! New versions 3.2.3 and 2.5.19 released

The Joomla! project has just released two new versions that fix multiple XSS and SQL injection vulnerabilities. It is strongly suggested that you update your Joomla! website to the latest version. You can find more info about these issue at the Joomla! security blog.

We have released Bitnami Joomla! 3.2.3 and 2.5.19 versions of the installers for Windows, OS X and Linux, virtual machines and Amazon EC2 and Windows Azure cloud images to fix the security issues.