{"id":204525,"date":"2018-05-24T00:15:00","date_gmt":"2018-05-23T22:15:00","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=204525"},"modified":"2020-05-10T01:36:12","modified_gmt":"2020-05-09T23:36:12","slug":"joomla-3-8-8-verffentlicht","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2018\/05\/24\/joomla-3-8-8-verffentlicht\/","title":{"rendered":"Joomla 3.8.8 ver&ouml;ffentlicht"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" title=\"Update\" style=\"border-left-width: 0px; border-right-width: 0px; border-bottom-width: 0px; float: left; margin: 0px 10px 0px 0px; display: inline; border-top-width: 0px\" border=\"0\" alt=\"Windows Update\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2015\/02\/Update.jpg\" width=\"54\" align=\"left\" height=\"54\"\/>Die Entwickler des Open-Source CMS Joomla haben k\u00fcrzlich die Version 3.8.8 (Stable) freigegeben. Diese neue Version behebt 9 Sicherheitsl\u00fccken und \u00fcber 50 Fehler, welche in der Release 3.8.7 gefunden worden sind.<\/p>\n<p><!--more--><\/p>\n<p>Die <a href=\"https:\/\/www.joomla.org\/announcements\/release-news\/5730-joomla-3-8-8-release.html\" target=\"_blank\" rel=\"noopener noreferrer\">Release-Notes<\/a> vom 22. Mai 2018 geben die folgenden Fixes f\u00fcr Bugs in Joomla 3.8.8. an.<\/p>\n<h2>Security Issues Fixed<\/h2>\n<ul>\n<li>Low Priority&nbsp; &#8211; Core &#8211; ACL violation in access levels (affecting Joomla 2.5.0 through 3.8.7) <a href=\"https:\/\/developer.joomla.org\/security-centre\/729-20180501-core-acl-violation-in-access-levels.html\">More information \u00bb<\/a> <\/li>\n<li>Low Priority &#8211;&nbsp; Core &#8211; Add phar files to the upload blacklist (affecting Joomla 2.5.0 through 3.8.7) <a href=\"https:\/\/developer.joomla.org\/security-centre\/730-20180502-core-add-phar-files-to-the-upload-blacklist.html\">More information \u00bb<\/a> <\/li>\n<li>Moderate Priority &#8211;&nbsp; Core &#8211; Information Disclosure about unpublished tags (affecting Joomla 3.1.0 through 3.8.7) <a href=\"https:\/\/developer.joomla.org\/security-centre\/731-20180503-core-information-disclosure-about-unpublished-tags.html\">More information \u00bb<\/a> <\/li>\n<li>Low Priority &#8211;&nbsp; Core &#8211; Installer leaks plain text password to local user (affecting Joomla 3.0.0 through 3.8.7) <a href=\"https:\/\/developer.joomla.org\/security-centre\/732-20180504-core-installer-leaks-plain-text-password-to-local-user.html\">More information \u00bb<\/a> <\/li>\n<li>Moderate Priority &#8211;&nbsp; Core &#8211; XSS Vulnerabilities &amp; additional hardening (affecting Joomla 3.0.0 through 3.8.7) <a href=\"https:\/\/developer.joomla.org\/security-centre\/733-20180505-core-xss-vulnerabilities-additional-hardening.html\">More information \u00bb<\/a> <\/li>\n<li>Low Priority &#8211; Core &#8211; Filter field in com_fields allows remote code execution (affecting Joomla 3.7.0 through 3.8.7) <a href=\"https:\/\/developer.joomla.org\/security-centre\/734-20180506-core-filter-field-in-com-fields-allows-remote-code-execution.html\">More information \u00bb<\/a> <\/li>\n<li>Low Priority &#8211; Core &#8211; Session deletion race condition (affecting Joomla 3.0.0 through 3.8.7)&nbsp; <a href=\"https:\/\/developer.joomla.org\/security-centre\/735-20180507-core-session-deletion-race-condition.html\">More information \u00bb<\/a> <\/li>\n<li>Low Priority &#8211; Core &#8211; Possible XSS attack in the redirect method (affecting Joomla 3.2.1 through 3.8.7)&nbsp; <a href=\"https:\/\/developer.joomla.org\/security-centre\/736-20180508-core-possible-xss-attack-in-the-redirect-methods.html\">More information \u00bb<\/a> <\/li>\n<li>Low Priority &#8211; Core &#8211; XSS vulnerability in the media manager (affecting Joomla 1.5.0 through 3.8.7)&nbsp; <a href=\"https:\/\/developer.joomla.org\/security-centre\/737-20180509-core-xss-vulnerability-in-the-media-manager.html\">More information \u00bb<\/a><\/li>\n<\/ul>\n<p>Please see the documentation wiki for the <a href=\"https:\/\/docs.joomla.org\/Special:MyLanguage\/J3.x:Joomla_3.8.8_notes_about_the_changed_default_settings\">security recommendations for updated sites<\/a>.<br \/>More details about the session deletion race condition are available on the <a href=\"https:\/\/developer.joomla.org\/news\/738-more-details-about-the-session-deletion-race-condition.html\">Developer Network site<\/a>. <\/p>\n<h2>Bug fixes and Improvements<\/h2>\n<ul>\n<li>Miscellaneous accessibility improvements for the Backend  <\/li>\n<li>Updated CodeMirror to 5.37 and various improvements <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/20269\">#20269<\/a> <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/19833\">#19833<\/a> <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/12542\">#12542<\/a> <\/li>\n<li>Improved handling of numeric user group names <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/20091\">#20091<\/a> <\/li>\n<li>[com_content] Filter by no author <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/20245\">#20245<\/a> <\/li>\n<li>Added support for PHP 7.3's <code>is_countable<\/code> function <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/20441\">#20441<\/a> <\/li>\n<li>Sending passwords by email disabled by default for new installs <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/pull\/20247\">#20247<\/a><\/li>\n<\/ul>\n<p>Eine komplette Liste der <a href=\"https:\/\/github.com\/joomla\/joomla-cms\/milestone\/33?closed=1\">Bug-Fxes<\/a> ist auf GitHub zu finden. Wegen der gefixten Sicherheitsl\u00fccken sollten Betreiber einer Joomla-Installation schnellstm\u00f6glich ein Update vornehmen (vorher ein Backup anfertigen). Der Download ist \u00fcber die <a href=\"https:\/\/www.joomla.org\/announcements\/release-news\/5730-joomla-3-8-8-release.html\" target=\"_blank\" rel=\"noopener noreferrer\">Release-Note-Seite<\/a> m\u00f6glich. (via)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Die Entwickler des Open-Source CMS Joomla haben k\u00fcrzlich die Version 3.8.8 (Stable) freigegeben. Diese neue Version behebt 9 Sicherheitsl\u00fccken und \u00fcber 50 Fehler, welche in der Release 3.8.7 gefunden worden sind.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[185],"tags":[4546,4315],"class_list":["post-204525","post","type-post","status-publish","format-standard","hentry","category-update","tag-joomla","tag-update"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/204525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=204525"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/204525\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=204525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=204525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=204525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}