Joomla! Developer Network

There is always a great deal of Joomla! development activity underway and communicating with other developers in the community is essential. This site is a resource for anyone looking to build or maintain software based on the Joomla platform

  • Project: Joomla!
  • SubProject: CMS
  • Severity: Moderate
  • Versions: 2.5.18 and earlier 2.5.x versions, 3.2.2 and earlier 3.x versions
  • Exploit type: Unauthorised Logins
  • Reported Date: 2014-February-21
  • Fixed Date: 2014-March-06
  • CVE Number: Pending

Description

Inadequate checking allowed unauthorised logins via GMail authentication.

Affected Installs

Joomla! CMS versions 2.5.18 and earlier 2.5.x versions, 3.2.2 and earlier 3.x versions

Solution

Upgrade to version 2.5.19 or 3.2.3

Contact

The JSST at the Joomla! Security Center.

Reported By: Stefania Gaianigo

The Joomla! Production Leadership Team is pleased to announce a new Release Leader for the Joomla! 3.5 release. Roberto Segura, the former Release Leader decided to step down due to family and work commitments, preventing him to dedicate time to the release.

As a result Roland Dalmulder has taken up the position of the “3.5 Release Leader” and will be assisted by George Wilson, both of the Production Leadership Team. Roland, as leader of the Joomla! Bug Squad, has great experience on working with Joomla! Contributors.

As a result of the change of release leaders there has been a change in the plans for the release. With the PLT policy of following semantic versioning ,we have decided that more frequent releases of Joomla should avoid large amounts of feature releases and therefore reduce the number of possible bugs. Therefore 3.5 will be shipping with 2 main new features - the work done by Hannes Papenberg on the new Routing system and the code already merged by Nic Dionysopoulos to give email notifications on Joomla Updates.

The PLT understands the importance however for all designers of improving the templating system - especially in terms of form fields for frontend editing. As a result we are still actively looking to implement this in the near future and are looking for volunteers to lead the team to accomplish this with JLayouts. If you are interested contact George Wilson at george.wilson@community.joomla.org.

We would like to place on record our sincere thanks to Roberto for the work he has done already on both Joomla 3.5 and JLayouts and we hope that he will have the time to contribute to Joomla again in the future.


Joomla 3.5 Update

The Joomla! Bug Squad (JBS) is pleased to announce the addition of the new Bug Squad Co-Leader. We welcome Tobias Zulauf to the team.

Leading the JBS is a big task. The group is large and there are many tasks at hand. Combine this with a position in the Production Leadership Team (PLT), you will soon see that there are not enough hours in a day for one person. We needed to find help for Roland Dalmulder - PLT member and current JBS lead.


Our New Bug Squad Co-Leader

As was announced earlier this year, the Joomla! project is actively working toward shutting down JoomlaCode.org. In addition to assisting existing users with migrating data, we have also been busy managing our own data as well and would like to provide this update on our progress.


JoomlaCode Shutdown Update

In a reorganising of the Joomla! web properties, the PLT has decided to close down the Joomla! User Experience website (https://ux.joomla.org). This news isn’t really new news. Discussions about moving the JUX forum started in 2013 but the steps necessary to move and shut the forum down were never completed. Is the Production Leadership Team still interested in a Joomla! user’s experience? You can bet it is!


JUX is closing

Many of you may have noticed the message "Please note: Due to technical reasons we have had to disable the Install from Web Service. We are working to get it back online as soon as possible. To find extensions please use the Joomla! Extensions Directory at http://extensions.joomla.org"

Install from web


Status of the Install from Web

Joomla! CMS

Current Release 

View known Issues

Development Status

Nightly CMS builds for developers are available for download

Joomla! Framework

Joomla! Reading

Joomla! Programming

Joomla! Programming

Mark Dexter & Louis Landry
Joomla! Templates

Joomla! Templates

Angie Radtke