Joomla 3.4.5 veröffentlicht (security release)

Hi,

eben wurden Joomla 3.4.5 veröffentlicht:
https://www.joomla.org/announc…oomla-3-4-5-released.html

Die Downloads gibt es hier:
https://github.com/joomla/joomla-cms/releases/tag/3.4.5

Das Update auf Joomla 3.4.5 enthält wie bereits angekündigt kritische Sicherheitspatches

[20151001] - Core - SQL Injection

Project: Joomla!
SubProject: CMS
Severity: High
Versions: 3.2.0 through 3.4.4
Exploit type: SQL Injection
Reported Date: 2015-October-15
Fixed Date: 2015-October-22
CVE Numbers: CVE-2015-7297, CVE-2015-7857, CVE-2015-7858
Description
Inadequate filtering of request data leads to a SQL Injection vulnerability.
Affected Installs
Joomla! CMS versions 3.2.0 through 3.4.4
Solution
Upgrade to version 3.4.5

http://developer.joomla.org/se…1-core-sql-injection.html

[20151002] - Core - ACL Violations

Project: Joomla!
SubProject: CMS
Severity: Moderate
Versions: 3.2.0 through 3.4.4
Exploit type: ACL Violation
Reported Date: 2015-October-15
Fixed Date: 2015-October-22
CVE Number: CVE-2015-7859
Description
Inadequate ACL checks in com_contenthistory provide potential read access to data which should be access restricted.
Affected Installs
Joomla! CMS versions 3.2.0 through 3.4.4
Solution
Upgrade to version 3.4.5

http://developer.joomla.org/se…-core-acl-violations.html

[20151003] - Core - ACL Violations

Project: Joomla!
SubProject: CMS
Severity: Moderate
Versions: 3.0.0 through 3.4.4
Exploit type: ACL Violation
Reported Date: 2015-October-15
Fixed Date: 2015-October-22
CVE Number: Pending
Description
Inadequate ACL checks in com_content provide potential read access to data which should be access restricted.
Affected Installs
Joomla! CMS versions 3.0.0 through 3.4.4
Solution
Upgrade to version 3.4.5

http://developer.joomla.org/se…-core-acl-violations.html