Joomla!Release News
- Details
Joomla! 3.6.2 is now available. This is a bug fix release for the 3.x series of Joomla. This release fixes some bugs in email cloaking and sessions from Joomla! 3.6.1.
What's in 3.6.2
Joomla! 3.6.2 fixes some issues found in the 3.6.1 release on Wednesday related to sessions on PHP 5.3 and some general email cloaking bugs:
- PHP 5.3 users were unable to login
- Cloaking emails could cause issues with placeholder and input values that were emails
- Emails in links with attributes had the attributes stripped when email cloaking happens
There were some known issues when updating to 3.6.1. Read about them here.
For known issues with the 3.6.2 release, see the Version 3.6.2 FAQ in the documentation site.
The Production Leadership Team's goal is to continue to provide regular, frequent updates to the Joomla! Community. Learn more about Joomla! development at the Joomla Developer Network.
- Details
During the latest release of Joomla! 3.6.1 an issue emerged because of a security fix. 3.6.1 introduced a CSRF token check to the Joomla! Update component as an extra level of security to fix a Medium Level security issue. 3.6.0 down to 2.5.4 (every Joomla! release with the update component) will hit an issue with failing to pass the CSRF token check because those versions don't generate the needed token to pass the check.
Therefore we have had to make some emergency decisions:
Updating from Joomla! 2.5.x
Unfortunately there was a bug when updating Joomla! 2.5.x to 3.6.0 - this was patched in the 3.6.1 release - however as this migration is no longer possible - you will need to first migrate to Joomla! 3.5.1 then upgrade to 3.6.0. Then follow the steps below for users on Joomla! 3.6.0.
Updating from Joomla! 3.0.0-3.5.1
Update to Joomla! 3.6.0 through the Joomla! Update component. Then follow the steps below for users on Joomla! 3.6.0.
Updating from Joomla! 3.6.0
Update the Joomla! Update Component through the Extension Manager. (In the administrator part of your website (example.com/administrator), go to Extensions -> Manage -> update. It might be that you have to clear the update cache before the component is shown, if the necessary update still doesn’t show up, go to Update Sites and click Rebuild.)
Then use the Joomla! Update component ( components -> Joomla! Update) to update to the latest 3.6.x version.
- Details
Joomla! 3.6.1 is now available. This is a security release for the 3.x series of Joomla. This release fixes several low level security issues. We strongly encourage you update your sites.
IMPORTANT: PLEASE READ THIS ANNOUNCEMENT ABOUT THE 3.6.1 UPDATE PROCESS
What's in 3.6.1?
Version 3.6.1 also addresses several issues:
- Fixes a bug resulting from a backwards compatibility break in PHP 7.0.9
- Fix for language redirects being cached in the browser
- Fix upgrades from Joomla! 2.5.28
- Fix SQLAzure database driver
- TinyMCE upgrade to 4.4.0.
Thanks to the hard work of 46 different volunteer contributors, more than 500 code commits, addressing nearly 150 issues, were made for the 3.6.1 release.
See the list of fixed GitHub issues for details of the tracker items fixed.
Security Issues Fixed
- Medium Priority - Core - CRSF More information »
- Low Priority - Core - ACL Violations More information »
- Low Priority - Core - XSS Vulnerability More information »
For known issues with the 3.6.1 release, see the Version 3.6.1 FAQ in the documentation site.
The Production Leadership Team's goal is to continue to provide regular, frequent updates to the Joomla! Community. Learn more about Joomla! development at the Joomla! Developer Network.