- Details
- Category: News
- Hits: 3447
Joomla 3.9.10 is here - a regression bug fix release for the Joomla 3.9.9 security and bug fixes release!
The Joomla project team has recently released version 3.9.9 that fixes one low-priority security vulnerabilities and 32 bugs and improvements.
Security Issues Fixed
- Low Priority - Core - Filter attribute in subform fields allows remote code execution (affecting Joomla 3.9.7 through 3.9.8)
Bug fixes and Improvements
- Repeatable Custom Fields: fix to keep HTML tags
- Media Manager: Modal layout improved
- Voting: Cache cleaned after voting
- Article ordering: Items grouped by category first
- Batch system: Improvements for Contact and Newsfeed
Community Builder 2.4.2 (latest build) and all Joomlapolis add-ons work just fine with Joomla 3.9.10. You can see everything in action on our demo site.
Joomla 3.9.10 is a highly recommended upgrade for all Joomla 3.x series sites - you should upgrade immediately.
As always, before any Joomla upgrade on your live website, take a backup just in case anything goes wrong.
You can learn more about the fixed bugs by reading the Joomla 3.9.9 and the Joomla 3.9.10 announcements.
- Details
- Category: News
- Hits: 3208
Joomla 3.9.8 is here - a regression bug fix release for the Joomla 3.9.7 security and bug fixes release!
The Joomla project team has recently released version 3.9.7 that addresses three security vulnerabilities fixes and over 40 bugs and improvements.
Security Issues Fixed
- Low Priority - Core - CSV injection in com_actionlogs (affecting Joomla 3.9.0 through 3.9.6)
- Low Priority - Core - XSS in subform field (affecting Joomla 3.6.0 through 3.9.6)
- Low Priority - Core - ACL hardening of com_joomlaupdate (affecting Joomla 3.8.13 through 3.9.6)
Bug fixes and Improvements
- Batch system: Copy permissions of modules and categories
- Progessive cache improvements
- Fix to avoid duplicated custom fields in com_content
- RTL improvements
- Removal of the unofficial French Help Server
- TinyMCE improvements
- RSS: Fix to display the right category
- Media Manager: Fix directory traversal for symlinked folders
- User registration: Correct http schema used
Community Builder 2.4.2 (latest build) and all Joomlapolis add-ons work just fine with Joomla 3.9.8. You can see everything in action on our demo site.
Joomla 3.9.8 is a highly recommended upgrade for all Joomla 3.x series sites - you should upgrade immediately.
As always, before any Joomla upgrade on your live website, take a backup just in case anything goes wrong.
You can learn more about the fixed bugs by reading the Joomla 3.9.7 and the Joomla 3.9.8 announcements.
- Details
- Category: News
- Hits: 3477
CB Paid Subscriptions (CBSubs) 4.3.1 is here with 15 new features and 23 bug fixes!
CB Paid Subscriptions (CBSubs GPL) 4.3.1 is a features and bug fixes release.
The main features in this release are:
- Export functionality (CSV, XML, JSON) now available for subscriptions and baskets.
- New functionality added to Stripe payment gateway, including support for multibanco, EPS payments, ACH debit transfers, currency restrictions and IPN dispute handling.
- Authorize.net gateway now supports transHashSHA2 as an alternative to MD5.
- New menu options added for Subscriptions, Access Denied and Account Expired views.
CBSubs 4.3.1 is available in our Downloads section and simply requires an active subscription to CBSubs. It is a highly recommended upgrade and works great with latest CB 2.4.2.
CBSubs Stripe has undergone a large rewrite and now requires webhooks as well as server side processing of payments has been removed. If you have not configured webhooks you will need to do so before or after updating.
See discussion thread for detailed changelog.
- Details
- Category: News
- Hits: 3534
CB Template Changer 5.0 released!
CB Template Changer 5.0 has been released and is fully compatible with Community Builder 2.4.2.
There are 4 new features and 1 bug fix and the css files are CB 2.4.2 compatible.
Change log:
Features
- Additional Bootstrap 4 variables now allow font sizes to be adjustable for custom themes
- Bootstrap functions and variables are now accessible in custom usage
- Change param names for CSS textareas to work around default mod security exceptions
- User interface improvements to quickly mark a template as default
Bugs
- Overrides not saving now fixed
You can see this add-on in action on our demo site.
- Details
- Category: News
- Hits: 4310
Community Builder can be freely downloaded by all registered members
We just released Community Builder 2.4.2 with 6 new features and 5 bug fixes and a minor (low level) security fix in admin area.
The three most noteworthy features are:
- Ability to import and export fields, tabs and userlist definitions
- Improved substitutions in terms and condition fields
- Random user mode added to CB Online module
Community Builder 2.4.2 is a recommended upgrade for all CB sites.
Our demo website has already been updated to Community Builder 2.4.2, so you can see it in action along will all our Joomlapolis add-ons.
As always, you should first test on a cloned environment before upgrading your production site.
We would like to give a special thanks to Mario Korth, working for Hackmanit GmbH, for his responsible report of the low-level security bug in the admin area, affecting CB 2.0 through 2.4.1. This is the first - be it low level - security bug identified in Community Builder in over 11 months and only second in over 11 years.
A detailed changelog is available in the discussion thread.
- Joomla 3.9.5 Security and Bug Fixes release!
- CB Query 6.0 and CB Code 2.0 released with autocomplete feature
- Joomla 3.9.4 Security and Bug Fixes release!
- Community Builder 2.4.1 Released!
- Joomla 3.9.3 Security and Bug Fixes release!
- More about Joomla Privacy Suite and Community Builder
- Joomla 3.9.2 Security and Bug Fixes release!
- Community Builder 2.4 Released!
- Joomla 3.9.1 bug fixes release!
- Community Builder 2.3 Released!