Details

Category: News

Published: 13 June 2019

Last Updated: 25 September 2020

Hits: 3070

Joomla 3.9.8 is here - a regression bug fix release for the Joomla 3.9.7 security and bug fixes release!

The Joomla project team has recently released version 3.9.7 that addresses three security vulnerabilities fixes and over 40 bugs and improvements.

Security Issues Fixed

• Low Priority - Core - CSV injection in com_actionlogs (affecting Joomla 3.9.0 through 3.9.6)
• Low Priority - Core - XSS in subform field (affecting Joomla 3.6.0 through 3.9.6)
• Low Priority - Core - ACL hardening of com_joomlaupdate (affecting Joomla 3.8.13 through 3.9.6)

Bug fixes and Improvements

• Batch system: Copy permissions of modules and categories
• Progessive cache improvements
• Fix to avoid duplicated custom fields in com_content
• RTL improvements
• Removal of the unofficial French Help Server
• TinyMCE improvements
• RSS: Fix to display the right category
• Media Manager: Fix directory traversal for symlinked folders
• User registration: Correct http schema used

Community Builder 2.4.2 (latest build) and all Joomlapolis add-ons work just fine with Joomla 3.9.8. You can see everything in action on our demo site.

Joomla 3.9.8 is a highly recommended upgrade for all Joomla 3.x series sites - you should upgrade immediately.

As always, before any Joomla upgrade on your live website, take a backup just in case anything goes wrong.

You can learn more about the fixed bugs by reading the Joomla 3.9.7 and the Joomla 3.9.8 announcements.

Details

Category: News

Published: 04 June 2019

Last Updated: 05 June 2019

Hits: 3340

CB Paid Subscriptions (CBSubs) 4.3.1 is here with 15 new features and 23 bug fixes!

CB Paid Subscriptions (CBSubs GPL) 4.3.1 is a features and bug fixes release.

The main features in this release are:

• Export functionality (CSV, XML, JSON) now available for subscriptions and baskets.
• New functionality added to Stripe payment gateway, including support for multibanco, EPS payments, ACH debit transfers, currency restrictions and IPN dispute handling.
• Authorize.net gateway now supports transHashSHA2 as an alternative to MD5.
• New menu options added for Subscriptions, Access Denied and Account Expired views.

CBSubs 4.3.1 is available in our Downloads section and simply requires an active subscription to CBSubs. It is a highly recommended upgrade and works great with latest CB 2.4.2.

CBSubs Stripe has undergone a large rewrite and now requires webhooks as well as server side processing of payments has been removed. If you have not configured webhooks you will need to do so before or after updating.

See discussion thread for detailed changelog.

Details

Category: News

Published: 23 May 2019

Last Updated: 25 September 2020

Hits: 3414

CB Template Changer 5.0 released!

CB Template Changer 5.0 has been released and is fully compatible with Community Builder 2.4.2.

There are 4 new features and 1 bug fix and the css files are CB 2.4.2 compatible.

Change log:

Features

1. Additional Bootstrap 4 variables now allow font sizes to be adjustable for custom themes
2. Bootstrap functions and variables are now accessible in custom usage
3. Change param names for CSS textareas to work around default mod security exceptions
4. User interface improvements to quickly mark a template as default

Bugs

1. Overrides not saving now fixed

You can see this add-on in action on our demo site.

Details

Category: News

Published: 15 May 2019

Last Updated: 25 September 2020

Hits: 4169

Community Builder can be freely downloaded by all registered members

We just released Community Builder 2.4.2 with 6 new features and 5 bug fixes and a minor (low level) security fix in admin area.

The three most noteworthy features are:

1. Ability to import and export fields, tabs and userlist definitions
2. Improved substitutions in terms and condition fields
3. Random user mode added to CB Online module

Community Builder 2.4.2 is a recommended upgrade for all CB sites.

Our demo website has already been updated to Community Builder 2.4.2, so you can see it in action along will all our Joomlapolis add-ons.

As always, you should first test on a cloned environment before upgrading your production site.

We would like to give a special thanks to Mario Korth, working for Hackmanit GmbH, for his responsible report of the low-level security bug in the admin area, affecting CB 2.0 through 2.4.1. This is the first - be it low level - security bug identified in Community Builder in over 11 months and only second in over 11 years.

A detailed changelog is available in the discussion thread.

Details

Category: News

Published: 11 April 2019

Last Updated: 25 September 2020

Hits: 3300

Joomla 3.9.5 is here - a security and bug fixes release!

The Joomla project team has recently released version 3.9.5 that addresses three security vulnerabilities fixes and several bugs and improvements.

Security Issues Fixed

• Low Priority - Core - Directory Traversal in com_media (affecting Joomla 1.5.0 through 3.9.4)
• High Priority - Core - Helpsites refresh endpoint callable for unauthenticated users (affecting Joomla 3.2.0 through 3.9.4)
• Moderate Priority - Core - Object.prototype pollution in JQuery $.extend (affecting Joomla 3.0.0 through 3.9.4)

Bug fixes and Improvements

• User Password: Add minimum lowercase rule for password validation
• Associations tab: Fix wrong behaviour of Indonesian language
• Debug language: Fix User Actions Log Manager
• New installation language: Kazakh
• Google Authenticator plugin (2FA): QR-code generator implemented

Community Builder 2.4.1 (latest build) and all Joomlapolis add-ons work just fine with Joomla 3.9.5. You can see everything in action on our demo site.

The Joomla 3.9.5 is a highly recommended upgrade for all Joomla 3.x series sites - you should upgrade immediately.

As always, before any Joomla upgrade on your live website, take a backup just in case anything goes wrong.

You can learn more about the fixed bugs by reading the Joomla 3.9.5 announcement.