Joomla! 3.4.5 security release

The Joomla! project has just released a new version that fix multiple SQL injection and ACL violation vulnerabilities. 

This is a security release for the 3.x series and it only contains the security fixes, no other changes have been made. It is strongly suggested that you update your Joomla! website to the latest version. 

You can find more info about these issue at the Joomla! release news.

We have released Bitnami Joomla! 3.4.5 installers, virtual machines and Amazon EC2, Google, VMware vCloud Air, DigitalOcean and Azure cloud images that fix these issues. 

Do you already have a Joomla! installation? You can follow our guide about how to upgrade the application and you won't have to be worried about these vulnerabilities. 

Have questions about Bitnami Joomla! or the security issue? Post to our community forum, and we would be happy to help you.

Drupal security fix SA-CORE-2014-005

The Drupal project has just released a new version that fixes a highly critical issue: SA-CORE-2014-005. A vulnerability in the Drupal 7 API allows an attacker to send specially crafted requests resulting in arbitrary SQL execution.

We have released BitNami Drupal 7.32 installers, virtual machines and Amazon EC2 images that fix this issue. We are continuing to work on upgrading other Drupal-based applications like CiviCRM and OpenAtrium.

You should patch your Drupal version as soon as possible. You can follow the step by step instructions at this blog post. Basically you will need to ssh to your machine, ssh to the Drupal installation directory and execute drush.

$ cd /opt/bitnami/apps/drupal/htdocs
$ drush up

If everything goes well you should see something similar to the following:

Project drupal was updated successfully. Installed version is now 7.32.

Backups were saved into the directory /home/bitnami/drush-backups/bitnami_drupal7/20141017020023/drupal.       [ok]

No database updates required                    [success]

'all' cache was cleared.                        [success]

Finished performing updates.                         [ok]

In case you were not familiar with Bitnami Drupal, it is a self-contained and easy to use distribution that makes it simple to start developing and deploying Drupal applications.