Joomla 3.8.8 veröffentlicht

Hi,

heute wurde die stable Version von 3.8.8 veröffentlicht. Diese neue Version enthält 52 Fehlerbehebungen.

https://www.joomla.org/announc…joomla-3-8-8-release.html
https://www.joomla.de/news/joo…-8-stable-veroeffentlicht

Download: https://downloads.joomla.org/cms/joomla3/3-8-8
Changelog: https://github.com/joomla/joomla-cms/milestone/33?closed=1

Security Issues Fixed

• Low Priority - Core - ACL violation in access levels (affecting Joomla 2.5.0 through 3.8.7) More information »
• Low Priority - Core - Add phar files to the upload blacklist (affecting Joomla 2.5.0 through 3.8.7) More information »
• Moderate Priority - Core - Information Disclosure about unpublished tags (affecting Joomla 3.1.0 through 3.8.7) More information »
• Low Priority - Core - Installer leaks plain text password to local user (affecting Joomla 3.0.0 through 3.8.7) More information »
• Moderate Priority - Core - XSS Vulnerabilities & additional hardening (affecting Joomla 3.0.0 through 3.8.7) More information »
• Low Priority - Core - Filter field in com_fields allows remote code execution (affecting Joomla 3.7.0 through 3.8.7) More information »
• Low Priority - Core - Session deletion race condition (affecting Joomla 3.0.0 through 3.8.7) More information »
• Low Priority - Core - Possible XSS attack in the redirect method (affecting Joomla 3.2.1 through 3.8.7) More information »
• Low Priority - Core - XSS vulnerability in the media manager (affecting Joomla 1.5.0 through 3.8.7) More information »

Wenn jemand das mod_random_image (Zufallsbild) Modul aus dem Core verwendet bitte diese Info beachten: https://docs.joomla.org/J3.x:M…age_PHP_Error_after_3.8.8

Mehr Details:

Sollte man das Modul verwenden bekommt man folgende Fehlermeldung:

Fatal error: Using $this when not in object context in .../modules/mod_random_image/tmpl/default.php on line 16

Der Fehler kann durch diesen Patch behoben werden:

https://github.com/joomla/joomla-cms/pull/20533/files

Aktueller Code (/modules/mod_random_image/tmpl/default.php Zeile 16)

<?php echo JHtml::_('image', $image->folder . '/' . $this->escape($image->name), $this->escape($image->name), array('width' => $image->width, 'height' => $image->height)); ?>

Neuer Code (/modules/mod_random_image/tmpl/default.php Zeile 16)

<?php echo JHtml::_('image', $image->folder . '/' . htmlspecialchars($image->name, ENT_COMPAT, 'UTF-8'), htmlspecialchars($image->name, ENT_COMPAT, 'UTF-8'), array('width' => $image->width, 'height' => $image->height)); ?>