Discuss Joomla! 3.3.1 Released

[pe7er]

Here you can discuss about the release of Joomla 3.3.1
See Announcement: http://forum.joomla.org/viewtopic.php?f=8&t=848491

[leolam]

To all.....Thanks to all those fabulous contributors who made the release of Joomla 3.1.1 possible today! 100 bugs resolved.... Great Job!

Your site has been successfully updated. Your Joomla version is now 3.3.1

Leo

[Shimei]

To all.....Thanks to all those fabulous contributors who made the release of Joomla 3.1.1 possible today! 100 bugs resolved.... Great Job!

Your site has been successfully updated. Your Joomla version is now 3.3.1

Leo

Seen the same message

[leolam]

A missing thing is the release notes of joomla 3.3.1. It's here: http://developer.joomla.org/version-3-3 ... notes.html

The link is in the release announement

Leo

[klipper]

403 error when updating to J2.5.21 or J3.3.1

When you get this error when updating to Joomla 3.3.1 (or 2.5.21):

403 - An error has occurred.
Access forbidden
Return to Control Panel

You have probably updated recenly to Akeeba Backup Pro v. 3.11.1
The plug-in 'System - Backup on update' which create a backup before updating Joomla is returning this error.
When you disable this plug-in in Plug-in manager during update of Joomla, you will not get this error anymore and you can finish the update process.

I reported the issue to Akeeba Backup

[klipper]

Akeeba Backup released a bugfix version of Akeeba Backup Pro version 3.11.2.
With this update the 403 error issue has been fixed. So if your current version of ABP is version 3.11.1: Before updating Joomla: first update Akeeba Backup Pro to version 3.11.2

[jdaum]

A range of hacker sites claim there is a core SQL injection vulnerability in Joomla 3.3.0. I cannot find anything in the release notes that something like this would have been fixed.

Does the security team have a position on this claim? It seems to be only accessible after payment:

http://1337day.com/exploits/22233

Thanks for your response,

Jochen

[jooguy]

3.3.1 update broke my site, Im trying to figure out the issue now

[deleted user]

A range of hacker sites claim there is a core SQL injection vulnerability in Joomla 3.3.0. I cannot find anything in the release notes that something like this would have been fixed.

Does the security team have a position on this claim? It seems to be only accessible after payment:

http://1337day.com/exploits/22233

Thanks for your response,

Jochen

There was an attempt at reaching out to these folks to determine if what they're claiming is a true exploit without success. Thus far, the only claims to this exploit are on these hacker sites and behind a paywall; there has been no other responsible disclosure to the security team at this point.

[AK_CCM]

Hello all,

I don't know if this is the right place. If not please move the post to the right place - thanks in advance.

I want to read the details of these release notes:

Components 32655 com_tags detailview displays wrong heading
Components 33602 Tags view on cat-blog and articles

But if I click on them an error message occurs:

Error

Call to undefined function renderAssociationList()

Do you have this issue too?

Regards, Andreas

[sovainfo]

Just wait till JC becomes available again.

[stutteringp0et]

A range of hacker sites claim there is a core SQL injection vulnerability in Joomla 3.3.0. I cannot find anything in the release notes that something like this would have been fixed.

Does the security team have a position on this claim? It seems to be only accessible after payment:

http://1337day.com/exploits/22233

Thanks for your response,

Jochen

There was an attempt at reaching out to these folks to determine if what they're claiming is a true exploit without success. Thus far, the only claims to this exploit are on these hacker sites and behind a paywall; there has been no other responsible disclosure to the security team at this point.

I was thinking of buying it just to disclose it - but they want $8900 for it! Screw a bunch of that...

[DavidBoggitt]

I was thinking of buying it just to disclose it - but they want $8900 for it! Screw a bunch of that...

Is that not just loose change to you?

[stutteringp0et]

I wish

[leolam]

Please keep this thread clean?

Leo

[stutteringp0et]

I found the same exploit for sale on a different site - only 1 bitcoin ($594)

http://satoshibox.com/536e2f3d4c347b6cfe0083c4

That seems more reasonably priced. Maybe if we pool resources...

ETA: It seems that these hackers even hack each other. Here's the same thing released as a "leak" for only 0.1907 BTC ($113.46)

http://satoshibox.com/537f85674c347b1570008357

Getting more affordable the deeper I dig